August 2020 - Release-announce - lists.openstack.org

nova 20.4.0 (train)
by no-reply＠openstack.org 28 Aug '20

28 Aug '20

We are chuffed to announce the release of: nova 20.4.0: Cloud computing fabric controller This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 20.4.0 ^^^^^^ Bug Fixes * Previously, attempting to configure an instance with the "e1000e" or legacy "VirtualE1000e" VIF types on a host using the QEMU/KVM driver would result in an incorrect "UnsupportedHardware" exception. These interfaces are now correctly marked as supported. Changes in nova 20.3.0..20.4.0 ------------------------------ 6a07edb4b2 libvirt: Provide VIR_MIGRATE_PARAM_PERSIST_XML during live migration c61f4c8e20 libvirt: Do not reference VIR_ERR_DEVICE_MISSING when libvirt is < v4.1.0 2442344fa1 catch libvirt exception when nodedev not found. 95bce095ed Handle multiple 'vcpusched' elements during live migrate 280007c870 Silence amqp heartbeat warning 863d6ef760 libvirt: Handle VIR_ERR_DEVICE_MISSING when detaching devices b971dc82cb objects: Update keypairs when saving an instance b1ead1fb2a zuul: remove legacy-tempest-dsvm-neutron-dvr-multinode-full 7d33d74414 Correct reported system memory ddbc262494 libvirt: Mark e1000e VIF as supported 58c9c3f238 hardware: Raise useful error for invalid mempage size f26823c780 Guard against missing image cache directory 7a5111ba29 Fix cherry-pick check for merge patch 38ee1f3942 Remove stale nested backport from InstancePCIRequests d307b964ce Check cherry-pick hashes in pep8 tox target 1a320f2a0e libvirt: Don't delete disks on shared storage during evacuate 172eb21dee Add functional test for bug 1550919 c93ca60956 compute: Allow snapshots to be created from PAUSED volume backed instances Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 - nova/compute/api.py | 2 +- nova/config.py | 26 + nova/objects/instance.py | 5 +- nova/objects/instance_pci_requests.py | 8 - .../functional/regressions/test_bug_1595962.py | 3 +- .../functional/regressions/test_bug_1843708.py | 93 +++ .../unit/objects/test_instance_pci_requests.py | 14 - nova/virt/hardware.py | 18 +- nova/virt/libvirt/driver.py | 208 +++++-- nova/virt/libvirt/guest.py | 25 +- nova/virt/libvirt/host.py | 4 - nova/virt/libvirt/imagecache.py | 40 +- nova/virt/libvirt/migration.py | 20 +- nova/virt/libvirt/vif.py | 2 + ...882919-support-e1000e-vif-5437a45c13dff978.yaml | 7 + tools/check-cherry-picks.sh | 42 ++ tox.ini | 1 + 31 files changed, 1406 insertions(+), 282 deletions(-)

1 0

cinder-tempest-plugin 1.1.0 (victoria)
by no-reply＠openstack.org 28 Aug '20

28 Aug '20

We are excited to announce the release of: cinder-tempest-plugin 1.1.0: Tempest plugin tests for Cinder. This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/cinder-tempest-plugin Download the package from: https://tarballs.openstack.org/cinder-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/cinder/+bugs For more details, please see below. Changes in cinder-tempest-plugin 1.0.0..1.1.0 --------------------------------------------- f1432e1 Consistency groups: fix the exceptions handling a75d5e5 Add test for cinder_img_volume_type image metadata 6e36e2b zuul: collect cinderlib logs from tempest node(s) only 9d626d0 Skip a few c-bak tests broken by the new ceph 0ca94af Disable siblings for the cindelib functional tests e2eeff1 Add test cases for bugs 1869746 and 1873518 5f8e8cd Fix hacking min version to 3.0.1 9362153 Add stable branch jobs on the plugins master gate 79d1390 Cleanup py27 support f144183 Add a basic CentOS 8 job (LVM/lio/barbican) a571b39 Enable revert tests when possible, bump timeout fb18e1a Add LVM+tgt tempest job 5ae7924 Handle the case when tempest fails Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 104 ++++++++++++++- .../api/volume/admin/test_volume_backup.py | 140 +++++++++++++++++++++ cinder_tempest_plugin/api/volume/base.py | 35 ++++++ .../api/volume/test_create_from_image.py | 83 ++++++++++++ cinder_tempest_plugin/exceptions.py | 22 ++++ .../services/consistencygroups_client.py | 15 +-- playbooks/post-cinderlib.yaml | 2 +- playbooks/tempest-and-cinderlib-run.yaml | 8 +- setup.cfg | 23 ---- setup.py | 9 -- test-requirements.txt | 2 +- tox.ini | 8 +- 12 files changed, 401 insertions(+), 50 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index af89592..e0bd682 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 +hacking>=3.0.1,<3.1 # Apache-2.0

1 0

validations-libs 1.0.3
by no-reply＠openstack.org 28 Aug '20

28 Aug '20

We are ecstatic to announce the release of: validations-libs 1.0.3: A common library for the validations framework The source is available from: https://opendev.org/openstack/validations-libs Download the package from: https://tarballs.openstack.org/validations-libs/ For more details, please see below. Changes in validations-libs 1.0.2..1.0.3 ---------------------------------------- fd1bdba Add lower ansible-runner version as requirements for train 15e7404 Add a way to override the default validation log path f686e20 Switch legacy Zuul jobs to native Zuul v3 jobs 6f32414 Update openstackdocstheme. Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 16 ++-- lower-constraints.txt | 2 +- .../legacy/validations-dsvm-functional/post.yaml | 96 ---------------------- .../legacy/validations-dsvm-functional/run.yaml | 37 --------- .../legacy/validations-dsvm-functional/setup.yaml | 60 -------------- playbooks/post.yaml | 9 ++ playbooks/validations-libs-functional.yaml | 14 ++++ requirements.txt | 2 +- roles/fetch-validations/defaults/main.yaml | 3 + roles/fetch-validations/tasks/main.yaml | 24 ++++++ roles/validations/defaults/main.yaml | 23 ++++++ roles/validations/tasks/main.yaml | 29 +++++++ .../validations/tasks}/validations.yaml | 6 +- validations_libs/ansible.py | 6 +- validations_libs/validation_actions.py | 4 +- 16 files changed, 126 insertions(+), 207 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 3696992..7a946be 100644 --- a/requirements.txt +++ b/requirements.txt @@ -8 +8 @@ PyYAML>=3.12 # MIT -ansible-runner>=1.4.4 # Apache-2.0 +ansible-runner>=1.3.4 # Apache-2.0

1 0

neutron 14.3.1 (stein)
by no-reply＠openstack.org 27 Aug '20

27 Aug '20

We are overjoyed to announce the release of: neutron 14.3.1: OpenStack Networking This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 14.3.1 ^^^^^^ Bug Fixes * 1875981 (https://bugs.launchpad.net/neutron/+bug/1875981) Neutron now correctly removes associated DNS records when an admin deletes ports, servers or floation IPs. Changes in neutron 14.3.0..14.3.1 --------------------------------- b3647782e4 port_forwarding: validate args before invoking db update fda4a375c4 [Stable only] Drop *-master jobs c2311465bf Fix validation of IPv6 subnets with external RAs a93e6c922c Don't check if any bridges were recrected when OVS was restarted 18a171808b [Security] fix allowed-address-pair 0.0.0.0/0 issue 0d9ec2b758 Fix Traceback when running neutron-ipset-cleanup tool 8181c5dbfe Ensure drop flows on br-int at agent startup for DVR too 514a18ee92 Don't add arp responder for non tunnel network port 72085466b5 Optionally use admin powers when deleting DNS records Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 12 --- neutron/agent/linux/ipset_manager.py | 2 +- neutron/agent/linux/iptables_firewall.py | 2 +- neutron/agent/linux/openvswitch_firewall/rules.py | 6 ++ neutron/api/rpc/handlers/securitygroups_rpc.py | 6 +- neutron/cmd/ipset_cleanup.py | 2 + neutron/db/l3_db.py | 23 ++++-- neutron/db/securitygroups_rpc_base.py | 23 ++++-- neutron/plugins/ml2/drivers/l2pop/mech_driver.py | 7 ++ .../drivers/openvswitch/agent/ovs_neutron_agent.py | 48 +++++------- .../externaldns/drivers/designate/driver.py | 22 ++++-- neutron/services/portforwarding/pf_plugin.py | 43 +++++++++++ .../linux/openvswitch_firewall/test_firewall.py | 7 +- .../agent/linux/openvswitch_firewall/test_rules.py | 3 +- .../unit/agent/linux/test_iptables_firewall.py | 22 ++++-- .../api/rpc/handlers/test_securitygroups_rpc.py | 22 ++++-- .../plugins/ml2/drivers/l2pop/test_mech_driver.py | 29 +++++++ .../openvswitch/agent/test_ovs_neutron_agent.py | 16 +++- .../unit/services/portforwarding/test_pf_plugin.py | 89 +++++++++++++++++++++- .../notes/bug-1875981-ec32d8c3918b0dd4.yaml | 6 ++ 24 files changed, 361 insertions(+), 99 deletions(-)

1 0

octavia-lib 2.2.0 (victoria)
by no-reply＠openstack.org 27 Aug '20

27 Aug '20

We are amped to announce the release of: octavia-lib 2.2.0: A library to support Octavia provider drivers. This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/octavia-lib Download the package from: https://pypi.org/project/octavia-lib Please report issues through: https://storyboard.openstack.org/#!/project/openstack/octavia-lib For more details, please see below. 2.2.0 ^^^^^ New Features * Added parameter "alpn_protocols" to listeners. This parameter contains the list of protocols supported by listeners, in descending order of preference. The supported protocols are "http/1.0", "http/1.1" and "h2". Changes in octavia-lib 2.1.1..2.2.0 ----------------------------------- fe022cd Add Proxy protocol version 2 support b262fc9 Add alpn_protocols to the listener data model b38f831 Fix new pylint errors Diffstat (except docs and test files) ------------------------------------- octavia_lib/api/drivers/data_models.py | 4 +++- octavia_lib/api/drivers/driver_lib.py | 6 +++--- octavia_lib/api/drivers/exceptions.py | 24 ++++++++-------------- octavia_lib/common/constants.py | 14 ++++++++++--- ...d-listener-alpn-protocols-ecb49db86b956c71.yaml | 7 +++++++ 10 files changed, 46 insertions(+), 30 deletions(-)

1 0

nova 21.1.0 (ussuri)
by no-reply＠openstack.org 27 Aug '20

27 Aug '20

We are overjoyed to announce the release of: nova 21.1.0: Cloud computing fabric controller This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 21.1.0 ^^^^^^ Upgrade Notes ************* * When using file-backed memory, the "nova-compute" service will now fail to start if the amount of reserved memory configured using "[DEFAULT] reserved_host_memory_mb" is equal to or greater than the total amount of memory configured using "[libvirt] file_backed_memory". Where reserved memory is less than the total amount of memory configured, a warning will be raised. This warning will become an error in a future release. The former combination is invalid as it would suggest reserved memory is greater than total memory available, while the latter is considered incorrect behavior as reserving of file-backed memory can and should be achieved by reducing the filespace allocated as memory by modifying "[libvirt] file_backed_memory". Bug Fixes ********* * A new "[workarounds]/reserve_disk_resource_for_image_cache" config option was added to fix the bug 1878024 where the images in the compute image cache overallocate the local disk. If this new config is set then the libvirt driver will reserve DISK_GB resources in placement based on the actual disk usage of the image cache. (https://bugs.launchpad.net/nova/+bug/1878024) * Previously, attempting to configure an instance with the "e1000e" or legacy "VirtualE1000e" VIF types on a host using the QEMU/KVM driver would result in an incorrect "UnsupportedHardware" exception. These interfaces are now correctly marked as supported. Changes in nova 21.0.0..21.1.0 ------------------------------ bbf9d1de06 libvirt: Provide VIR_MIGRATE_PARAM_PERSIST_XML during live migration 3f3b889f4e libvirt: Do not reference VIR_ERR_DEVICE_MISSING when libvirt is < v4.1.0 30ee639b62 [Trivial] Remove wrong format_message() conversion 034b2fa8fe compute: Don't delete the original attachment during pre LM rollback 6db72002a6 Add regression tests for bug #1889108 6070c55793 func: Add live migration rollback volume attachment tests 726ca4aec5 func: Add _live_migrate helper to InstanceHelperMixin 9069b2802f tests: Define constants in '_IntegratedTestBase' ac05bc3b38 Handle multiple 'vcpusched' elements during live migrate 42bfd50626 compute: Do not allow rescue attempts using volume snapshot images aed86ee5d6 objects: Update keypairs when saving an instance 93058ae1b8 libvirt: Handle VIR_ERR_DEVICE_MISSING when detaching devices cf399a363c zuul: remove legacy-tempest-dsvm-neutron-dvr-multinode-full ecd218b1a4 Correct reported system memory 247e33af8f catch libvirt exception when nodedev not found. 840de3b892 libvirt: Mark e1000e VIF as supported 02f213b831 Fix cherry-pick check for merge patch 9d3ebd58aa libvirt: Don't allow "reserving" file-backed memory a6a48e876c Guard against missing image cache directory eedc0b5ff3 hardware: Raise useful error for invalid mempage size 5cacfaab82 Check cherry-pick hashes in pep8 tox target 8b48ca672d libvirt: Don't delete disks on shared storage during evacuate 6ccd13f8ae Add functional test for bug 1550919 ed05246069 remove support of oslo.messaging 9.8.0 warning message 57702ad484 Add admin doc information about image cache resource accounting 968981b585 Reserve DISK_GB resource for the image cache a270eeeb9b compute: Allow snapshots to be created from PAUSED volume backed instances fa2bfac862 Make quotas respect instance_list_per_project_cells 1caddc4250 Silence amqp heartbeat warning e8b3927c92 Update scheduler instance info at confirm resize 016eeec984 Reproduce bug 1869050 e7ea1226b1 Bump hacking min version to 3.0.1 e61d002530 Remove stale nested backport from InstancePCIRequests Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 - nova/api/openstack/compute/rescue.py | 5 +- nova/compute/api.py | 24 +- nova/compute/manager.py | 13 +- nova/conf/workarounds.py | 19 + nova/config.py | 13 + nova/exception.py | 4 + nova/objects/instance.py | 5 +- nova/objects/instance_pci_requests.py | 8 - nova/quota.py | 8 +- .../functional/compute/test_live_migration.py | 93 +++ .../functional/regressions/test_bug_1595962.py | 3 +- .../functional/regressions/test_bug_1843708.py | 70 +++ .../functional/regressions/test_bug_1889108.py | 101 ++++ .../unit/api/openstack/compute/test_rescue.py | 10 + .../unit/objects/test_instance_pci_requests.py | 14 - nova/virt/hardware.py | 20 +- nova/virt/imagecache.py | 9 + nova/virt/libvirt/driver.py | 276 ++++++--- nova/virt/libvirt/guest.py | 25 +- nova/virt/libvirt/host.py | 4 - nova/virt/libvirt/imagecache.py | 31 + nova/virt/libvirt/migration.py | 20 +- nova/virt/libvirt/vif.py | 2 + ...erve-disk-for-image-cache-ef6688f869b12bcb.yaml | 10 + ...-memory-reserved-conflict-3ad4c04ab993ebf8.yaml | 15 + ...882919-support-e1000e-vif-5437a45c13dff978.yaml | 7 + test-requirements.txt | 2 +- tools/check-cherry-picks.sh | 42 ++ tox.ini | 1 + 55 files changed, 2068 insertions(+), 304 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index b04b42b0df..25ac29b7ef 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -hacking>=2.0<2.1 +hacking>=3.0.1,<3.1.0 # Apache-2.0

1 0

neutron 16.1.0 (ussuri)
by no-reply＠openstack.org 26 Aug '20

26 Aug '20

We are amped to announce the release of: neutron 16.1.0: OpenStack Networking This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 16.1.0 ^^^^^^ New Features ************ * A new configuration option "http_retries" was added. This option allows configuring the number of times the nova or ironic client should retry on a failed HTTP call. * "DVR" routers now support "flat" networks. * Added support for router availability zones in OVN. The OVN driver can now read from the router's availability_zone_hints field and schedule router ports accordingly with the given availability zones. Deprecation Notes ***************** * Abstract method "plug_new" from the neutron.agent.linux.interface.LinuxInterfaceDriver class now accepts an optional parameter "link_up". Usage of this method, which takes from 5 to 9 positional arguments, without "link_up" is now deprecated and will not be possible starting in the W release. Third-party drivers which inherit from this base class should update the implementation of their "plug_new" method. Bug Fixes ********* * 1875981 (https://bugs.launchpad.net/neutron/+bug/1875981) Neutron now correctly removes associated DNS records when an admin deletes ports, servers or floation IPs. * Fixed bug 1876092 (https://bugs.launchpad.net/neutron/+bug/1876092) which caused DUP ICMP replies on the "flat" networks used with "DVR" routers. * Fixed an issue where the client on a dual-stack (IPv4 + IPv6) network failed to get configuration from the dnsmasq DHCP server. See bug: 1876094 (https://launchpad.net/bugs/1876094) Changes in neutron 16.0.0..16.1.0 --------------------------------- 3549e52467 ovn-migration-mtu: Support migrating MTU of GRE networks c3aedcd508 ovn-migration-mtu: Support providing project/user domain by name 083748fadd Fix port can not be created with the sg of other project b468514e99 migration: Restart OVS after setting protocols c678d89dab port_forwarding: validate args before invoking db update 3496564488 Fix validation of IPv6 subnets with external RAs 18f019984a String to byte conversion should provide the encoding type ed22f7a2ff [OVS][FW] Remote SG IDs left behind when a SG is removed 8200c68f68 Use "replace" to remove a section of a string 9e699c3743 [ovn] Use normalized remote prefix IPs in OVN driver 21719a875d [Stable only] Drop *-master jobs 20b9e7759f ovn migration: Support stack name ab32d7ae64 [OVN] Allow IP allocation with different segments for OVN service ports d07e879208 [OVN] Extra DHCP options validation: Log invalid options a678c43646 ovn-migration: Remove docker references 2b00041f4d Fix neutron-ovn-tempest-ovs-master-fedora job 143fe8ff89 Ensure drop flows on br-int at agent startup for DVR too 5554d620d1 [OVN] Fix logic issue while deleting port with QoS 61851345ce [OVN] Unify OVN/OVS compilation c0fba2007c migration: Use ansible-inventory to parse tripleo inventory fb9815fdf0 [OVN] Stop using neutron_tempest_plugin in OVN singlenode job 90955cf893 Stop installing Octavia in OVN jobs 8341a87bd0 [OVN] Wait for WaitForDataPathBindingCreateEvent event in functional tests c172235f58 Optionally use admin powers when deleting DNS records b4130c0dc1 Auto-delete dhcp ports on segment delete f4172a9ab9 Fix pep8 job 2827100169 [DVR] Related routers should be included if are requested e723f95e60 [ci] Fix several rally task arguments 34d4a8bb99 Add config option ``http_retries`` 7b41d63f8f Make DVR router support FLAT network for ovs-agent 34c93c6c77 [OVN] Fix db-sync-util Traceback when port security not enabled ce2866a4f6 [OVN] Allow use of ovn-sync mechanism driver fd4821f918 [OVN] OVN driver to adapt to enable_distributed_floating_ip changes 87fae223fe Improve log message when port losts its vlan tag 88e70a520a Do not block connection between br-int and br-phys on startup e79afe115c Workaround for TCP checksum issue with ovs-dpdk and veth pair 53e99b76a2 [OVN] Add support for router availability zones 5f8af42dbd L3 agent scheduler should return a valid index if manual scheduling 1b86aff85e DhcpFilter should always return a valid index if "force_scheduling" 2b2abfc76a Use pyroute2 for SRIOV VF commands 19f60ce728 Fix the wrong value for QoS rate conversion to bytes/s 2509d26eb4 [OVN] Load segments plugin in case not loaded in maintanance task bdbeb67357 Make _ensure_default_security_group method atomic 84ac8cf9ff [OVS] Make QoS OVS agent deletion operations more resilient 2ba53430f1 [OVN] Avoid unnecessary DB writes during agent liveness check 68706b556b Fixes dnsmasq host file parsing with "addr6_list" ba5edb71db Configure privsep in SR-IOV agent fd1883b50a ovn: Remove is_port_groups_supported() code 961e19b34a No rpc_response_max_timeout in LB-agent 990c3732d4 Migrate neutron grenade jobs to be native Zuul v3 080123851c Fix ussuri gates dd49fae3f4 Fix ssh to nodes during ML2/OVS to ML2/OVN migration 9b0ca47c6d ovn-migration: Stop ml2/ovs agents before installing OVN resources 9dd0d32063 [OVN] Create localnet port for each created segment b8e7886d8b Don't check if any bridges were recrected when OVS was restarted fde6fc3ecd Fix iptables rules comments 1e53a77082 [OVN] Override notify_nova config in neutron-ovn-db-sync-util a0dfb50a9a [OVN] Don't set virtual port type on ports with similar addresses 98010a2f6a Fix Traceback when running neutron-ipset-cleanup tool d09b1b40b6 Blacklist the OVN tempest IPv6 hotplug test 32667390c7 [OVN] Enhance port's extra DHCP options support b03f9d4c43 [DVR] Reconfigure re-created physical bridges for dvr routers 2614637a69 Delete segment RPs when network is deleted ae4b3edce2 Ensure that stale flows are cleaned from phys_bridges 47f28d5a5f Fix neutron-ovn-db-sync-util issues 5e3c8640b0 Allow usage of legacy 3rd-party interface drivers c1488863fb Add sg name in after delete event kwargs 548eca3180 Update OVN local.conf example files 8e20ca7d0a Set class ovsdb_conection to None ef9869e0e1 Fix ovn-db-sync-util after removing l3 ovsdb connection 60212a1934 [ovn] devstack needs to support openflow15 bc223bcb93 [OVN]: Make _delete_port() more error-resilent 14aea286e6 [OVN][metadata] Adding ERROR trace upon unexpected data d6ff46bdca Add Rocky milestone tag for alembic migration revisions 719cae183a Cap pycodestyle to be < 2.6.0 a6e524111c Switch to stable/ussuri neutron-tempest-plugin jobs 86b5771896 [ovn]: Fix l3_plugin.add_router_interface to comply with RouterPluginBase f9752c5542 Report L3 extensions enabled in the L3 agent's config 38afccc28a Use dhcp-host tag support when supported Diffstat (except docs and test files) ------------------------------------- devstack/lib/ovn_agent | 117 +-- devstack/lib/ovs | 65 +- devstack/ovn-compute-local.conf.sample | 2 +- devstack/ovn-db-local.conf.sample | 2 +- devstack/ovn-local.conf.sample | 2 +- devstack/ovn-vtep-local.conf.sample | 2 +- .../internals/ovn/acl_optimizations.rst | 186 ----- .../contributor/testing/ci_scenario_jobs.rst | 3 +- etc/neutron/rootwrap.d/dhcp.filters | 1 + etc/neutron/rootwrap.d/l3.filters | 1 + lower-constraints.txt | 1 + neutron/agent/common/ovs_lib.py | 12 +- neutron/agent/l3/agent.py | 3 +- neutron/agent/linux/dhcp.py | 58 +- neutron/agent/linux/ethtool.py | 34 + neutron/agent/linux/interface.py | 31 +- neutron/agent/linux/ip_lib.py | 21 +- neutron/agent/linux/ip_link_support.py | 108 --- neutron/agent/linux/iptables_firewall.py | 9 +- .../agent/linux/openvswitch_firewall/firewall.py | 152 ++-- neutron/agent/linux/tc_lib.py | 28 +- neutron/agent/ovn/metadata/server.py | 14 +- neutron/cmd/ipset_cleanup.py | 2 + neutron/cmd/ovn/migration_mtu.py | 61 +- neutron/cmd/ovn/neutron_ovn_db_sync_util.py | 19 +- neutron/cmd/runtime_checks.py | 11 + neutron/cmd/sanity/checks.py | 36 - neutron/cmd/sanity_check.py | 23 - neutron/common/_constants.py | 9 + neutron/common/ovn/acl.py | 195 +---- neutron/common/ovn/constants.py | 101 ++- neutron/common/ovn/extensions.py | 9 +- neutron/common/ovn/utils.py | 89 ++- neutron/conf/common.py | 10 +- neutron/db/db_base_plugin_v2.py | 22 +- neutron/db/ipam_backend_mixin.py | 13 +- neutron/db/ipam_pluggable_backend.py | 17 +- neutron/db/l3_agentschedulers_db.py | 19 +- neutron/db/l3_db.py | 23 +- neutron/db/l3_dvrscheduler_db.py | 19 +- .../rocky/expand/867d39095bf4_port_forwarding.py | 5 + neutron/db/securitygroups_db.py | 16 +- neutron/notifiers/ironic.py | 3 +- neutron/notifiers/nova.py | 1 + neutron/objects/ports.py | 16 +- neutron/objects/subnet.py | 14 +- neutron/opts.py | 2 + neutron/plugins/ml2/db.py | 31 +- .../drivers/linuxbridge/agent/common/constants.py | 3 - .../linuxbridge/agent/linuxbridge_neutron_agent.py | 3 + .../drivers/mech_sriov/agent/common/exceptions.py | 8 - .../drivers/mech_sriov/agent/eswitch_manager.py | 35 +- .../agent/extension_drivers/qos_driver.py | 15 +- .../ml2/drivers/mech_sriov/agent/pci_lib.py | 158 +---- .../drivers/mech_sriov/agent/sriov_nic_agent.py | 11 +- .../drivers/openvswitch/agent/common/constants.py | 21 +- .../openvswitch/agent/openflow/native/br_int.py | 37 +- .../openvswitch/agent/openflow/native/br_phys.py | 8 +- .../openvswitch/agent/ovs_dvr_neutron_agent.py | 67 +- .../drivers/openvswitch/agent/ovs_neutron_agent.py | 88 +-- .../ml2/drivers/ovn/mech_driver/mech_driver.py | 156 +++- .../ml2/drivers/ovn/mech_driver/ovsdb/api.py | 54 -- .../ml2/drivers/ovn/mech_driver/ovsdb/commands.py | 69 -- .../ovn/mech_driver/ovsdb/extensions/qos.py | 11 +- .../drivers/ovn/mech_driver/ovsdb/impl_idl_ovn.py | 30 +- .../drivers/ovn/mech_driver/ovsdb/maintenance.py | 52 +- .../drivers/ovn/mech_driver/ovsdb/ovn_client.py | 331 ++++----- .../drivers/ovn/mech_driver/ovsdb/ovn_db_sync.py | 289 ++------ neutron/privileged/agent/linux/ip_lib.py | 42 ++ neutron/scheduler/base_scheduler.py | 37 + neutron/scheduler/dhcp_agent_scheduler.py | 20 +- .../externaldns/drivers/designate/driver.py | 22 +- neutron/services/ovn_l3/exceptions.py | 21 + neutron/services/ovn_l3/plugin.py | 70 +- neutron/services/portforwarding/pf_plugin.py | 43 ++ neutron/services/segments/db.py | 3 +- neutron/services/segments/plugin.py | 51 +- .../ovn/mech_driver/ovsdb/test_maintenance.py | 12 +- .../ovn/mech_driver/ovsdb/test_ovn_db_resources.py | 96 +-- .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 175 +---- .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 17 +- .../drivers/ovn/mech_driver/test_mech_driver.py | 93 +++ .../privileged/agent/linux/test_tc_lib.py | 8 +- .../l3_router/test_l3_dvr_router_plugin.py | 50 ++ .../linux/openvswitch_firewall/test_firewall.py | 196 ++++-- .../unit/agent/linux/test_iptables_firewall.py | 9 + .../unit/cmd/ovn/test_neutron_ovn_db_sync_util.py | 31 + .../agent/test_linuxbridge_neutron_agent.py | 2 +- .../agent/extension_drivers/test_qos_driver.py | 14 +- .../mech_sriov/agent/test_eswitch_manager.py | 38 +- .../ml2/drivers/mech_sriov/agent/test_pci_lib.py | 186 ++--- .../mech_sriov/agent/test_sriov_nic_agent.py | 8 +- .../agent/openflow/native/test_br_int.py | 113 ++- .../agent/openflow/native/test_br_phys.py | 6 +- .../openvswitch/agent/test_ovs_neutron_agent.py | 112 ++- .../ovn/mech_driver/ovsdb/extensions/test_qos.py | 8 + .../drivers/ovn/mech_driver/ovsdb/test_commands.py | 165 ----- .../ovn/mech_driver/ovsdb/test_impl_idl_ovn.py | 8 +- .../ovn/mech_driver/ovsdb/test_maintenance.py | 29 +- .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 200 ++---- .../drivers/ovn/mech_driver/test_mech_driver.py | 781 ++++++++++++++------- .../unit/privileged/agent/linux/test_ip_lib.py | 33 + .../unit/services/portforwarding/test_pf_plugin.py | 87 ++- playbooks/configure_functional_job.yaml | 1 + .../legacy/neutron-grenade-dvr-multinode/post.yaml | 15 - .../legacy/neutron-grenade-dvr-multinode/run.yaml | 60 -- .../legacy/neutron-grenade-multinode/post.yaml | 15 - .../legacy/neutron-grenade-multinode/run.yaml | 60 -- rally-jobs/task-neutron.yaml | 8 +- ...ttp_retries-config-option-b81dd29c03ba8c6a.yaml | 6 + ...without-link_up-parameter-27f8310eb1e1910a.yaml | 10 + .../notes/bug-1875981-ec32d8c3918b0dd4.yaml | 6 + ...port-flat-network-for-ovs-fdf8c3eb461426ec.yaml | 9 + ...k-issue-with-dnsmasq-2.81-c95a46e4f4459bd1.yaml | 6 + ...router-availability-zones-03a802ee19689474.yaml | 6 + test-requirements.txt | 3 +- tools/configure_for_func_testing.sh | 13 +- .../infrared/tripleo-ovn-migration/main.yml | 10 +- .../roles/prepare-migration/tasks/main.yml | 22 +- .../tripleo_environment/ovn_migration.sh | 61 +- .../playbooks/ovn-migration.yml | 8 + .../playbooks/reduce-dhcp-renewal-time.yml | 9 +- .../playbooks/roles/migration/tasks/sync-dbs.yml | 12 +- .../roles/migration/templates/activate-ovn.sh.j2 | 11 +- .../roles/migration/templates/clone-br-int.sh.j2 | 2 +- .../playbooks/roles/stop-agents/defaults/main.yml | 3 + .../playbooks/roles/stop-agents/tasks/cleanup.yml | 21 + .../playbooks/roles/stop-agents/tasks/main.yml | 18 + .../playbooks/roles/stop-agents/vars/main.yml | 19 + zuul.d/base.yaml | 3 + zuul.d/grenade.yaml | 86 ++- zuul.d/project.yaml | 7 +- zuul.d/rally.yaml | 1 - zuul.d/tempest-multinode.yaml | 50 -- zuul.d/tempest-singlenode.yaml | 72 +- 172 files changed, 4400 insertions(+), 3639 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 43d563a78f..21312fe318 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9 +9 @@ flake8-import-order==0.12 # LGPLv3 -pycodestyle>=2.0.0 # MIT +pycodestyle>=2.0.0,<2.6.0 # MIT @@ -23,0 +24 @@ pylint==2.2.0;python_version>="3.0" # GPLv2 +isort==4.3.21 # MIT

1 0

oslo.utils 3.40.7 (stein)
by no-reply＠openstack.org 26 Aug '20

26 Aug '20

We are thrilled to announce the release of: oslo.utils 3.40.7: Oslo Utility library This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/oslo.utils Download the package from: https://pypi.org/project/oslo.utils Please report issues through: https://bugs.launchpad.net/oslo.utils/+bugs For more details, please see below. Changes in oslo.utils 3.40.6..3.40.7 ------------------------------------ 4cf03f0 Release greenthread when computing checksum 127da50 tox: Use upper-constraints for docs jobs Diffstat (except docs and test files) ------------------------------------- oslo_utils/fileutils.py | 3 +++ tox.ini | 11 +++++++---- 3 files changed, 29 insertions(+), 4 deletions(-)

1 0

ovsdbapp 1.2.1 (ussuri)
by no-reply＠openstack.org 26 Aug '20

26 Aug '20

We are overjoyed to announce the release of: ovsdbapp 1.2.1: A library for creating OVSDB applications This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/ovsdbapp Download the package from: https://tarballs.openstack.org/ovsdbapp/ Please report issues through: https://bugs.launchpad.net/ovsdbapp/+bugs For more details, please see below. Changes in ovsdbapp 1.2.0..1.2.1 -------------------------------- e8e64da OVNNB backend: Fix LbDelCommand when using vip param ced4b6d Fix pep8 job Diffstat (except docs and test files) ------------------------------------- lower-constraints.txt | 1 + ovsdbapp/schema/ovn_northbound/api.py | 8 +++++-- ovsdbapp/schema/ovn_northbound/commands.py | 17 ++++++++------ .../schema/ovn_northbound/test_impl_idl.py | 26 ++++++++++++++++++++++ test-requirements.txt | 1 + 5 files changed, 44 insertions(+), 9 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 7e2e7ed..cc77360 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -7,0 +8 @@ coverage!=4.4,>=4.0 # Apache-2.0 +isort==4.3.21 # MIT

1 0

networking-bagpipe 12.0.1 (ussuri)
by no-reply＠openstack.org 26 Aug '20

26 Aug '20

We high-spiritedly announce the release of: networking-bagpipe 12.0.1: Mechanism driver for Neutron ML2 plugin using BGP E-VPNs/IP VPNs as a backend This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/networking-bagpipe Download the package from: https://pypi.org/project/networking-bagpipe Please report issues through: https://bugs.launchpad.net/networking-bagpipe/+bugs For more details, please see below. Changes in networking-bagpipe 12.0.0..12.0.1 -------------------------------------------- 0e866ee Monkey patch original current_thread _active b14e767 Fix pep8 job d6bee05 Switch to stable/ussuri neutron-tempest-plugin jobs c63b726 Update TOX_CONSTRAINTS_FILE for stable/ussuri a1d31f3 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 4 ++-- lower-constraints.txt | 1 + networking_bagpipe/agent/bagpipe_ml2/agent_extension.py | 6 ++++++ test-requirements.txt | 1 + tox.ini | 4 ++-- 6 files changed, 13 insertions(+), 4 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 78d0ef0..14d0089 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -17,0 +18 @@ reno>=2.5.0 # Apache-2.0 +isort==4.3.21 # MIT

1 0

neutron 15.2.0 (train)
by no-reply＠openstack.org 26 Aug '20

26 Aug '20

We are glad to announce the release of: neutron 15.2.0: OpenStack Networking This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 15.2.0 ^^^^^^ New Features ************ * A new configuration option "http_retries" was added. This option allows configuring the number of times the nova or ironic client should retry on a failed HTTP call. * Add new configuration option "igmp_snooping_enable". New option is in "OVS" config section and is used by openvswitch agent. This option is used to enable support for Internet Group Management Protocol (IGMP) in integration bridge. Bug Fixes ********* * 1875981 (https://bugs.launchpad.net/neutron/+bug/1875981) Neutron now correctly removes associated DNS records when an admin deletes ports, servers or floation IPs. Changes in neutron 15.1.0..15.2.0 --------------------------------- da0bad4acc [Stable only] Drop *-master jobs 0090884e15 String to byte conversion should provide the encoding type 9273af2c50 port_forwarding: validate args before invoking db update f65abc251b Fix validation of IPv6 subnets with external RAs 25078dd730 Don't check if any bridges were recrected when OVS was restarted 6615f248e2 [OVS][FW] Remote SG IDs left behind when a SG is removed 551130e9f4 [Security] fix allowed-address-pair 0.0.0.0/0 issue 91e5764a80 Fix Traceback when running neutron-ipset-cleanup tool 8f1912a1d1 [OVN] Allow IP allocation with different segments for OVN service ports 17eded1359 Ensure drop flows on br-int at agent startup for DVR too b47a2684b7 Optionally use admin powers when deleting DNS records 96fe5d3509 Auto-delete dhcp ports on segment delete a33fd8cb6a Fix pep8 job 3ae7b0f189 [DVR] Related routers should be included if are requested 76e651005b Add config option ``http_retries`` e3c3c891d5 Improve log message when port losts its vlan tag 4f501f405d Do not block connection between br-int and br-phys on startup 85f95e0bd9 Workaround for TCP checksum issue with ovs-dpdk and veth pair 870c3fddd1 DVR: Remove control plane arp updates for DVR b811b2d468 Fix the wrong value for QoS rate conversion to bytes/s eed9bcbd7b Make _ensure_default_security_group method atomic 3785868bfb [OVS] Make QoS OVS agent deletion operations more resilient 8e2cf239c8 Add ensure-tox in functional job b4707c1691 Fixes dnsmasq host file parsing with "addr6_list" d2112530f5 No rpc_response_max_timeout in LB-agent c5e00e551c Migrate neutron grenade multinode jobs to be native Zuul v3 fb766c1f83 Configure privsep in SR-IOV agent b5d67929b7 Add "igmp_snooping_enable" config option for OVS agent 7d97420046 Set OpenFlow 1.0, 1.3 and 1.4 by default on bridges 764ff2a70a Use pyroute2 for SRIOV VF commands 2376c54000 [DVR] Reconfigure re-created physical bridges for dvr routers 415755015a Delete segment RPs when network is deleted 0ce032275a Ensure that stale flows are cleaned from phys_bridges ab0515440f Add sg name in after delete event kwargs Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 98 +++++-- etc/neutron/rootwrap.d/dhcp.filters | 1 + etc/neutron/rootwrap.d/l3.filters | 1 + lower-constraints.txt | 1 + neutron/agent/common/ovs_lib.py | 34 ++- neutron/agent/linux/dhcp.py | 15 +- neutron/agent/linux/ethtool.py | 34 +++ neutron/agent/linux/interface.py | 10 + neutron/agent/linux/ip_lib.py | 21 +- neutron/agent/linux/ip_link_support.py | 108 -------- neutron/agent/linux/ipset_manager.py | 2 +- neutron/agent/linux/iptables_firewall.py | 2 +- .../agent/linux/openvswitch_firewall/firewall.py | 100 +++++-- neutron/agent/linux/openvswitch_firewall/rules.py | 6 + neutron/agent/linux/tc_lib.py | 28 +- neutron/api/rpc/handlers/securitygroups_rpc.py | 6 +- neutron/cmd/ipset_cleanup.py | 2 + neutron/cmd/sanity/checks.py | 36 --- neutron/cmd/sanity_check.py | 23 -- neutron/common/_constants.py | 9 + neutron/conf/agent/ovs_conf.py | 11 + neutron/conf/common.py | 10 +- neutron/db/db_base_plugin_v2.py | 22 +- neutron/db/ipam_backend_mixin.py | 13 +- neutron/db/ipam_pluggable_backend.py | 17 +- neutron/db/l3_db.py | 23 +- neutron/db/l3_dvr_db.py | 100 ------- neutron/db/l3_dvrscheduler_db.py | 64 +---- neutron/db/securitygroups_db.py | 13 +- neutron/db/securitygroups_rpc_base.py | 23 +- neutron/notifiers/ironic.py | 3 +- neutron/notifiers/nova.py | 1 + neutron/objects/ports.py | 16 +- neutron/objects/subnet.py | 14 +- neutron/opts.py | 2 + neutron/plugins/ml2/db.py | 31 ++- .../linuxbridge/agent/linuxbridge_neutron_agent.py | 3 + .../drivers/mech_sriov/agent/common/exceptions.py | 8 - .../drivers/mech_sriov/agent/eswitch_manager.py | 35 ++- .../agent/extension_drivers/qos_driver.py | 15 +- .../ml2/drivers/mech_sriov/agent/pci_lib.py | 158 +++-------- .../drivers/mech_sriov/agent/sriov_nic_agent.py | 11 +- .../openvswitch/agent/ovs_dvr_neutron_agent.py | 26 +- .../drivers/openvswitch/agent/ovs_neutron_agent.py | 69 +++-- neutron/privileged/agent/linux/ip_lib.py | 42 +++ .../externaldns/drivers/designate/driver.py | 22 +- neutron/services/portforwarding/pf_plugin.py | 43 +++ neutron/services/segments/db.py | 3 +- neutron/services/segments/plugin.py | 51 ++-- .../privileged/agent/linux/test_tc_lib.py | 8 +- .../l3_router/test_l3_dvr_router_plugin.py | 293 ++++----------------- .../linux/openvswitch_firewall/test_firewall.py | 123 +++++++-- .../agent/linux/openvswitch_firewall/test_rules.py | 3 +- .../unit/agent/linux/test_iptables_firewall.py | 22 +- .../api/rpc/handlers/test_securitygroups_rpc.py | 22 +- .../agent/test_linuxbridge_neutron_agent.py | 2 +- .../agent/extension_drivers/test_qos_driver.py | 14 +- .../mech_sriov/agent/test_eswitch_manager.py | 38 ++- .../ml2/drivers/mech_sriov/agent/test_pci_lib.py | 186 +++++-------- .../mech_sriov/agent/test_sriov_nic_agent.py | 8 +- .../openvswitch/agent/test_ovs_neutron_agent.py | 66 ++++- .../drivers/openvswitch/agent/test_ovs_tunnel.py | 19 +- .../unit/privileged/agent/linux/test_ip_lib.py | 33 +++ .../unit/scheduler/test_l3_agent_scheduler.py | 44 ---- .../unit/services/portforwarding/test_pf_plugin.py | 89 ++++++- playbooks/configure_functional_job.yaml | 1 + .../legacy/neutron-grenade-dvr-multinode/post.yaml | 15 -- .../legacy/neutron-grenade-dvr-multinode/run.yaml | 48 ---- .../legacy/neutron-grenade-multinode/post.yaml | 15 -- .../legacy/neutron-grenade-multinode/run.yaml | 48 ---- ...ttp_retries-config-option-b81dd29c03ba8c6a.yaml | 6 + ...ping_enable-config-option-6a0e15e4ed0a2cf7.yaml | 7 + .../notes/bug-1875981-ec32d8c3918b0dd4.yaml | 6 + test-requirements.txt | 1 + 98 files changed, 1561 insertions(+), 1616 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 9f87ab69c4..5f4a05d6b1 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -24,0 +25 @@ pylint==2.2.0;python_version>="3.0" # GPLv2 +isort==4.3.21 # MIT

1 0

ovn-octavia-provider 0.1.2 (ussuri)
by no-reply＠openstack.org 26 Aug '20

26 Aug '20

We high-spiritedly announce the release of: ovn-octavia-provider 0.1.2: OpenStack Octavia integration with OVN This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/ovn-octavia-provider Download the package from: https://tarballs.openstack.org/ovn-octavia-provider/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in ovn-octavia-provider 0.1.1..0.1.2 -------------------------------------------- 73030c5 Omit tests directory while couting the coverage report 1fe8369 Add installation of octavia-tempest-plugin to sample local.conf 13dd5b4 Fix member_batch_update function to follow api v2 6486888 Set the CONF.load_balancer.enabled_provider_drivers tempest conf 2f60a91 Fix pep8 and functional jobs Diffstat (except docs and test files) ------------------------------------- .coveragerc | 7 +++++++ devstack/local.conf.sample | 4 ++-- lower-constraints.txt | 1 + ovn_octavia_provider/driver.py | 16 +--------------- test-requirements.txt | 1 + tox.ini | 2 +- zuul.d/base.yaml | 19 ++++++++++++++++++- zuul.d/project.yaml | 6 ++++-- 11 files changed, 51 insertions(+), 37 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index cf4d41e..0b5f1d0 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -14,0 +15 @@ pylint==2.3.0 # GPLv2 +isort==4.3.21 # MIT

1 0

ovsdbapp 0.17.4 (train)
by no-reply＠openstack.org 26 Aug '20

26 Aug '20

We are glad to announce the release of: ovsdbapp 0.17.4: A library for creating OVSDB applications This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/ovsdbapp Download the package from: https://tarballs.openstack.org/ovsdbapp/ Please report issues through: https://bugs.launchpad.net/ovsdbapp/+bugs For more details, please see below. Changes in ovsdbapp 0.17.3..0.17.4 ---------------------------------- c5b598d OVNNB backend: Fix LbDelCommand when using vip param 4bfac95 Fix pep8 job Diffstat (except docs and test files) ------------------------------------- lower-constraints.txt | 1 + ovsdbapp/schema/ovn_northbound/api.py | 8 +++++-- ovsdbapp/schema/ovn_northbound/commands.py | 17 ++++++++------ .../schema/ovn_northbound/test_impl_idl.py | 26 ++++++++++++++++++++++ test-requirements.txt | 1 + 5 files changed, 44 insertions(+), 9 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 2e215dd..ac026f0 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -7,0 +8 @@ coverage!=4.4,>=4.0 # Apache-2.0 +isort==4.3.21 # MIT

1 0

networking-ovn 7.3.0 (train)
by no-reply＠openstack.org 26 Aug '20

26 Aug '20

We are happy to announce the release of: networking-ovn 7.3.0: OpenStack Neutron integration with OVN This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/networking-ovn Download the package from: https://pypi.org/project/networking-ovn Please report issues through: https://bugs.launchpad.net/networking-ovn/+bugs For more details, please see below. 7.3.0 ^^^^^ New Features * Added support for router availability zones in OVN. The OVN driver can now read from the router's availability_zone_hints field and schedule router ports accordingly with the given availability zones. Changes in networking-ovn 7.2.0..7.3.0 -------------------------------------- 1cd84b1d Fix member_batch_update function to follow api v2 9ab5eb97 migration: Restart OVS after setting protocols 42ea6e05 Use "replace" to remove a section of a string aa902374 ovn migration: Support stack name fcbbccb1 Allow IP allocation with different segments for OVN service ports - tests e7cb87e6 [OVN] Extra DHCP options validation: Log invalid options c52ae2ca ovn-migration: Remove docker references 5edaa33a [OVN] Fix logic issue while deleting port with QoS c2ce6a65 [OVN] Enable qos service plugin in tempest jobs 6bc778b5 migration: Use ansible-inventory to parse tripleo inventory 9858ef5a [OVN] HA Chassis Group: Ignore UPDATES when external_ids hasn't changed 44e5a6b9 Add support for router availability zones e8466166 Fix pep8 job 7aa6687e Remove pycodestyle from the dependency 4bd5b57d [OVN] Load segments plugin in case not loaded in maintanance task 0d0f0250 Enable neutron-tempest-plugin installation in tempest venv 8a4f4d40 [OVN] Create localnet port for each created segment c4448f44 ovn: Remove is_port_groups_supported() code ff33c578 [OVN] Avoid unnecessary DB writes during agent liveness check b5683951 Fix functional jobs by installing missing dependencies 15f22818 ovn-migration: Stop ml2/ovs agents before installing OVN resources 4d57476d Fix ssh to nodes during ML2/OVS to ML2/OVN migration 18091f0b Do not send status update in case of IpAddressAlreadyAllocated 98bc5114 Set class ovsdb_conection to None 539036aa [OVN] Don't set virtual port type on ports with similar addresses 17c504a8 [OVN] Enhance port's extra DHCP options support 01fb38ba Correctly initialize HashRingIsEmpty class 2fd2240c [ovn] devstack needs to support openflow15 99b505fc ovn: Override clean_hash_ring for sync util 53891179 [OVN]: Make _delete_port() more error-resilent 740f3149 Add support for OVN LB selection fields b9ab9503 test_router: Verify the creation and removal of a lrp 2d54cce2 Use "datetime.datetime.isoformat" instead of "timeutils.isotime" Diffstat (except docs and test files) ------------------------------------- devstack/lib/networking-ovn | 13 +- devstack/lib/ovn | 2 + devstack/override-defaults | 2 +- .../contributor/design/acl_optimizations.rst | 184 ------ lower-constraints.txt | 1 + migration/infrared/tripleo-ovn-migration/main.yml | 10 +- .../roles/prepare-migration/tasks/main.yml | 22 +- migration/tripleo_environment/ovn_migration.sh | 64 +- .../playbooks/ovn-migration.yml | 8 + .../playbooks/reduce-dhcp-renewal-time.yml | 9 +- .../roles/migration/tasks/cleanup-dataplane.yml | 1 - .../playbooks/roles/migration/tasks/sync-dbs.yml | 12 +- .../roles/migration/templates/activate-ovn.sh.j2 | 11 +- .../roles/migration/templates/clone-br-int.sh.j2 | 2 +- .../playbooks/roles/stop-agents/defaults/main.yml | 3 + .../playbooks/roles/stop-agents/tasks/cleanup.yml | 21 + .../playbooks/roles/stop-agents/tasks/main.yml | 18 + .../playbooks/roles/stop-agents/vars/main.yml | 19 + networking_ovn/cmd/neutron_ovn_db_sync_util.py | 12 +- networking_ovn/common/acl.py | 178 +----- networking_ovn/common/client_extensions/qos.py | 9 +- networking_ovn/common/constants.py | 105 ++- networking_ovn/common/exceptions.py | 6 +- networking_ovn/common/extensions.py | 8 +- networking_ovn/common/maintenance.py | 50 +- networking_ovn/common/ovn_client.py | 321 ++++------ networking_ovn/common/utils.py | 86 ++- networking_ovn/l3/l3_ovn.py | 47 +- networking_ovn/ml2/mech_driver.py | 101 ++- networking_ovn/octavia/ovn_driver.py | 82 +-- networking_ovn/ovn_db_sync.py | 284 +++------ networking_ovn/ovsdb/commands.py | 69 -- networking_ovn/ovsdb/impl_idl_ovn.py | 30 +- networking_ovn/ovsdb/ovn_api.py | 54 -- networking_ovn/ovsdb/ovsdb_monitor.py | 5 + .../unit/common/client_extensions/test_qos.py | 8 + ...router-availability-zones-03a802ee19689474.yaml | 6 + test-requirements.txt | 2 +- tox.ini | 2 +- zuul.d/networking-ovn-jobs.yaml | 44 +- 64 files changed, 2155 insertions(+), 2076 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 5ae1d49d..afa44658 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -10 +9,0 @@ flake8-import-order==0.12 # LGPLv3 -pycodestyle>=2.0.0,<2.6.0 # MIT @@ -22,0 +22 @@ testtools>=2.2.0 # MIT +isort==4.3.21 # MIT

1 0

openstack-ansible 19.1.4 (stein)
by no-reply＠openstack.org 26 Aug '20

26 Aug '20

We are overjoyed to announce the release of: openstack-ansible 19.1.4: Ansible playbooks for deploying OpenStack This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. Changes in openstack-ansible 19.1.3..19.1.4 ------------------------------------------- f12b74128 Bump SHAs for stable/stein f4c4d4c62 Bump SHAs for stable/stein Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 10 +-- playbooks/defaults/repo_packages/gnocchi.yml | 2 +- playbooks/defaults/repo_packages/nova_consoles.yml | 2 +- .../defaults/repo_packages/openstack_services.yml | 92 +++++++++++----------- 4 files changed, 53 insertions(+), 53 deletions(-)

1 0

openstack-ansible 20.1.5 (train)
by no-reply＠openstack.org 26 Aug '20

26 Aug '20

We exuberantly announce the release of: openstack-ansible 20.1.5: Ansible playbooks for deploying OpenStack This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. Changes in openstack-ansible 20.1.4..20.1.5 ------------------------------------------- 27b40bf8d Bump SHAs for stable/train 095bc436b Remove nova_api_placement from inventory 581e13073 Bump SHAs for stable/train fb3af471c Suppress errors when ara is not installed fe1a784c2 Fix management address lookup for metal hosts in some deployments 0a5eacf36 ceph: remove invalid logging options Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 18 ++--- inventory/env.d/nova.yml | 4 - inventory/group_vars/haproxy/haproxy.yml | 3 - inventory/inventory.ini | 2 - playbooks/common-playbooks/nova.yml | 6 +- playbooks/defaults/ceph_ansible.yml | 2 - playbooks/defaults/repo_packages/gnocchi.yml | 2 +- playbooks/defaults/repo_packages/nova_consoles.yml | 2 +- .../defaults/repo_packages/openstack_services.yml | 88 +++++++++++----------- playbooks/os-nova-install.yml | 20 +++-- scripts/openstack-ansible.sh | 2 +- 12 files changed, 67 insertions(+), 83 deletions(-)

1 0

neutron-dynamic-routing 15.0.1 (train)
by no-reply＠openstack.org 26 Aug '20

26 Aug '20

We are gleeful to announce the release of: neutron-dynamic-routing 15.0.1: Neutron Dynamic Routing This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/neutron-dynamic-routing Download the package from: https://tarballs.openstack.org/neutron-dynamic-routing/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron-dynamic-routing 15.0.0..15.0.1 ------------------------------------------------- 56de1c4 Monkey patch original current_thread _active 55dbf49 [stable only] Fix functional job 5300489 Set INSTALL_TEMPEST for train tempest jobs c2cf1cd Update TOX/UPPER_CONSTRAINTS_FILE for stable/train d06afb6 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 17 ----- neutron_dynamic_routing/cmd/eventlet/__init__.py | 6 ++ .../run.yaml | 6 +- .../run.yaml | 1 + .../run.yaml | 1 + .../run.yaml | 1 + .../run.yaml | 1 + .../post.yaml | 80 ---------------------- .../run.yaml | 65 ------------------ tox.ini | 2 +- 11 files changed, 17 insertions(+), 164 deletions(-)

1 0

oslo.messaging 12.1.3 (ussuri)
by no-reply＠openstack.org 26 Aug '20

26 Aug '20

We are tickled pink to announce the release of: oslo.messaging 12.1.3: Oslo Messaging API This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/oslo.messaging Download the package from: https://pypi.org/project/oslo.messaging Please report issues through: https://bugs.launchpad.net/oslo.messaging/+bugs For more details, please see below. Changes in oslo.messaging 12.1.2..12.1.3 ---------------------------------------- 360deb89 Catch ConnectionForced Exception Diffstat (except docs and test files) ------------------------------------- oslo_messaging/_drivers/impl_rabbit.py | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-)

1 0

oslo.messaging 12.3.0 (victoria)
by no-reply＠openstack.org 26 Aug '20

26 Aug '20

We joyfully announce the release of: oslo.messaging 12.3.0: Oslo Messaging API This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/oslo.messaging Download the package from: https://pypi.org/project/oslo.messaging Please report issues through: https://bugs.launchpad.net/oslo.messaging/+bugs For more details, please see below. 12.3.0 ^^^^^^ Bug Fixes * Add a new option *enable_cancel_on_failover* for rabbitmq driver which when enabled, will cancel consumers when queue appears to be down. Changes in oslo.messaging 12.2.2..12.3.0 ---------------------------------------- 196fa877 Cancel consumer if queue down 6659cb8d Bump bandit version 26e8bb4c Catch ConnectionForced Exception Diffstat (except docs and test files) ------------------------------------- oslo_messaging/_drivers/impl_rabbit.py | 96 ++++++++++++++-------- ...enable_cancel_on_failover-22ac472b93dd3a23.yaml | 6 ++ test-requirements.txt | 2 +- 4 files changed, 76 insertions(+), 35 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index d1cbfdeb..42a086a0 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -28 +28 @@ pyngus>=2.2.0 # Apache-2.0 -bandit>=1.1.0,<1.6.0 # Apache-2.0 +bandit>=1.6.0,<1.7.0 # Apache-2.0

1 0

sushy 3.3.1 (victoria)
by no-reply＠openstack.org 26 Aug '20

26 Aug '20

We joyfully announce the release of: sushy 3.3.1: Sushy is a small Python library to communicate with Redfish based systems This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/sushy For more details, please see below. 3.3.1 ^^^^^ Security Issues *************** * No longer logs passwords and auth tokens in DEBUG mode when using SessionService for authentication. Bug Fixes ********* * Fixes bugs in the "UpdateService.software_inventory" and "UpdateService.firmware_inventory" properties making them operational. Changes in sushy 3.3.0..3.3.1 ----------------------------- 03f5818 Less scary warning when GET /redfish/v1/SessionService fails 5ffe8ee Do not log passwords and auth tokens when using SessionService ec5ceef Remove auth token header completely when error occurs 0e27eba Add a CI job with UEFI+vmedia and clean up the job definitions d73c2af Include extended information in debugging output 3d45557 Fix retrieving software & firmware inventory 2029f82 Update version of hacking 8df68d8 Update system schema to 1.10 619445c Set min version of tox to 3.2.1 Diffstat (except docs and test files) ------------------------------------- lower-constraints.txt | 2 +- ...ftware-firmware-inventory-3e0e79e052aa76d9.yaml | 5 ++ .../notes/no-passwords-295207ac891d27ab.yaml | 5 ++ sushy/auth.py | 10 +++ sushy/connector.py | 31 ++++++-- sushy/exceptions.py | 3 +- sushy/resources/sessionservice/sessionservice.py | 12 ++-- sushy/resources/system/system.py | 2 +- sushy/resources/updateservice/updateservice.py | 38 ++++++---- .../json_samples/firmwareinventory_collection.json | 19 +++++ .../json_samples/softwareinventory_collection.json | 14 ---- .../unit/json_samples/updateservice_no_inv.json | 24 +++++++ .../sessionservice/test_sessionservice.py | 6 +- .../updateservice/test_softwareinventory.py | 33 +++++++-- .../resources/updateservice/test_updateservice.py | 84 ++++++++++++---------- sushy/utils.py | 12 ++++ test-requirements.txt | 2 +- tox.ini | 2 +- zuul.d/project.yaml | 6 +- zuul.d/sushy-jobs.yaml | 21 +++--- 26 files changed, 284 insertions(+), 127 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index e0ca2ea..01da614 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11 +11 @@ stestr>=2.0.0 # Apache-2.0 -hacking>=3.0.0,<3.1.0 # Apache-2.0 +hacking>=3.1.0,<3.2.0 # Apache-2.0

1 0

oslo.log 4.4.0 (victoria)
by no-reply＠openstack.org 26 Aug '20

26 Aug '20

We are jazzed to announce the release of: oslo.log 4.4.0: oslo.log library This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/oslo.log Download the package from: https://pypi.org/project/oslo.log Please report issues through: https://bugs.launchpad.net/oslo.log/+bugs For more details, please see below. Changes in oslo.log 4.3.0..4.4.0 -------------------------------- 63c1eca zuul: port the legacy grenade job 9524df6 Bump bandit version 6f9b434 Added uwsgi_name information into fluentFormatter event message 0a0bf42 Align contributing doc with oslo's policy Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 13 ++---- CONTRIBUTING.rst | 5 +++ oslo_log/formatters.py | 10 +++++ .../legacy/oslo.log-src-grenade-devstack/post.yaml | 15 ------- .../legacy/oslo.log-src-grenade-devstack/run.yaml | 51 ---------------------- test-requirements.txt | 2 +- 6 files changed, 20 insertions(+), 76 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 6e77232..ac16453 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -14 +14 @@ coverage>=4.5.1 # Apache-2.0 -bandit>=1.1.0,<1.6.0 # Apache-2.0 +bandit>=1.6.0,<1.7.0 # Apache-2.0

1 0

oslo.cache 2.6.0 (victoria)
by no-reply＠openstack.org 26 Aug '20

26 Aug '20

We contentedly announce the release of: oslo.cache 2.6.0: Cache storage for OpenStack projects. This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/oslo.cache Download the package from: https://pypi.org/project/oslo.cache Please report issues through: https://bugs.launchpad.net/oslo.cache/+bugs For more details, please see below. Changes in oslo.cache 2.5.0..2.6.0 ---------------------------------- c872fc0 Add python-binary-memcached to support SASL 89d14a0 Drop hard choice on py38 for functional tests 0d7a151 Bump dogpile.cache's version for Memcached TLS support 8979414 Add pre-commit to pep8 gate 1717811 Apply fixes for pre-commit compliance in all code b693711 Uses commit hash instead of version tags in pre-commit 795b238 Removes pre-commit hooks from Lucas-C e36ae6c Bump bandit version 78edaf5 Introducing usage of pre-commit a5ff884 Align contributing doc with oslo's policy Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 36 ++++++++++++++++++++++++++++++++++++ .zuul.yaml | 10 +++++----- CONTRIBUTING.rst | 5 +++++ lower-constraints.txt | 3 ++- requirements.txt | 2 +- test-requirements.txt | 4 +++- tox.ini | 2 +- 9 files changed, 54 insertions(+), 9 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 437444d..c38ff92 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ -dogpile.cache>=0.9.2 # BSD +dogpile.cache>=1.0.2 # BSD diff --git a/test-requirements.txt b/test-requirements.txt index 2726df6..9936741 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8 +8 @@ pifpaf>=0.10.0 # Apache-2.0 -bandit>=1.1.0,<1.6.0 # Apache-2.0 +bandit>=1.6.0,<1.7.0 # Apache-2.0 @@ -9,0 +10,2 @@ stestr>=2.0.0 # Apache-2.0 +pre-commit>=2.6.0 # MIT +python-binary-memcached>=0.29.0 # MIT

1 0

vitrage-tempest-plugin 5.0.0 (victoria)
by no-reply＠openstack.org 24 Aug '20

24 Aug '20

We are overjoyed to announce the release of: vitrage-tempest-plugin 5.0.0: Tempest plugin for Vitrage project This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/vitrage-tempest-plugin Download the package from: https://tarballs.openstack.org/vitrage-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/vitrage/+bugs For more details, please see below. Changes in vitrage-tempest-plugin 4.0.0..5.0.0 ---------------------------------------------- 161a59e Use vars() more readable then __dict__ 27feead Switch to newer openstackdocstheme and reno versions e2d1364 Add py38 package metadata ddd3fb1 Fix hacking min version to 3.0.1 7d6fe51 add tests in gate in for datasources 9c31548 Calculate the number of resources based on number of networks c72ecba Add stable branch jobs on the plugins master gate Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 55 ++++++++++++++++++++++ releasenotes/source/conf.py | 9 ++-- setup.cfg | 1 + test-requirements.txt | 10 ++-- 9 files changed, 81 insertions(+), 17 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a991866..767bebc 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5,5 +5,3 @@ -hacking>=3.0,<3.1.0;python_version>='3.5' # Apache-2.0 -hacking>=1.1.0,<1.2.0;python_version=='2.7' # Apache-2.0 -sphinx!=1.6.6,!=1.6.7,>=1.6.2,<2.0.0;python_version=='2.7' # BSD -sphinx>=2.0.0,!=2.1.0;python_version>='3.4' # BSD -openstackdocstheme>=1.31.2 # Apache-2.0 +hacking>=3.0.1,<3.1.0 # Apache-2.0 +sphinx>=2.0.0,!=2.1.0 # BSD +openstackdocstheme>=2.2.1 # Apache-2.0 @@ -11 +9 @@ openstackdocstheme>=1.31.2 # Apache-2.0 -reno>=2.5.0 # Apache-2.0 +reno>=3.1.0 # Apache-2.0

1 0

ironic 13.0.6 (train)
by no-reply＠openstack.org 20 Aug '20

20 Aug '20

We contentedly announce the release of: ironic 13.0.6: OpenStack Bare Metal Provisioning This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 13.0.6 ^^^^^^ New Features ************ * Adds a new "[ipmi]use_ipmitool_retries" option. When set to "True" and timing is supported by ipmitool, the number of retries and command interval will be passed to ipmitool so that ipmitool will do the retries. When set to "False", ironic will do the retries. Default is "True". Known Issues ************ * Some BMCs do not support the "Channel Cipher Suites" command that newer versions of ipmitool use. These versions of ipmitool will resend this command for each ipmitool retry, resulting in long response times. Setting "[ipmi]use_ipmitool_retries" to "false" will avoid this situation by implementing retries on the ironic level. Bug Fixes ********* * Allows deleting nodes with a broken driver unless they require stopping serial console. * Fixes json_rpc client connections always using HTTP even if *use_ssl* was set to True. * Hardware type "idrac" converts physical drives from "JBOD" to "RAID" mode before building RAID on them. * Hardware type "idrac" converts physical drives from "RAID" to "JBOD" mode after RAID "delete_configuration" cleaning step through raid interface. This ensures that the individual disks freed by deleting the virtual disks are visible to the OS. * When Ironic is doing IPMI retries the configured "min_command_interval" should be used instead of a default value of "1", which may be too short for some BMCs. * Fixes an issue where "ironic-conductor" initialization could return a "NodeNotLocked" error for requests requiring locks when the conductor was starting. This was due to the conductor removing locks after beginning accepting new work. The lock removal has been moved to after the Database connectivity has been established but before the RPC bus is initialized. Changes in ironic 13.0.5..13.0.6 -------------------------------- 3df540a35 Update number of VM on ironic-base 165c0ed6b Use TLS for json_rpc when configured a54376cef Remove locks before RPC bus is started 2b5759ef2 Stop running test_schedule_to_all_nodes in the multinode job 725fd9c23 New configuration parameter to use ipmitool retries 692cf843c Allow deleting nodes with a broken driver 619ec3dc8 DRAC: Drives conversion from JBOD to RAID 0c1be7f6d add tempest boot_mode config e45b46061 Correct Redfish boot once fallback conditional 4fb11f47c Stop using md5 for __repr__ of objects a4f86d8e8 DRAC: Drives conversion from raid to jbod a37fb3c16 Remove iDRAC Redfish boot device known issue Diffstat (except docs and test files) ------------------------------------- devstack/lib/ironic | 3 + ironic/common/json_rpc/client.py | 5 +- ironic/common/rpc_service.py | 2 + ironic/conductor/base_manager.py | 34 ++- ironic/conductor/manager.py | 12 + ironic/conductor/task_manager.py | 4 + ironic/conf/drac.py | 8 +- ironic/conf/ipmi.py | 8 + ironic/drivers/modules/drac/job.py | 28 +- ironic/drivers/modules/drac/raid.py | 145 ++++++++- ironic/drivers/modules/ipmitool.py | 10 +- ironic/drivers/modules/redfish/management.py | 2 +- ironic/objects/fields.py | 7 +- .../drivers/modules/redfish/test_management.py | 31 ++ .../unit/drivers/third_party_driver_mock_specs.py | 7 +- .../notes/destroy-broken-8b13de8382199aca.yaml | 5 + .../fix-json-rpc-client-ssl-2438a731beb3d5f9.yaml | 5 + ...s-conversion-jbod-to-raid-1a229627708e10b9.yaml | 5 + ...s-conversion-raid-to-jbod-de10755d1ec094ea.yaml | 8 + ...ries-min-command-interval-070cd7eff5eb74dd.yaml | 6 + ...tool-use_ipmitool_retries-b55b2b8ed5cab603.yaml | 16 + .../notes/remove-locks-first-d12ac27106f800f8.yaml | 9 + tools/bandit.yml | 1 - zuul.d/ironic-jobs.yaml | 22 +- 34 files changed, 696 insertions(+), 144 deletions(-)

1 0

ironic 15.0.1 (ussuri)
by no-reply＠openstack.org 20 Aug '20

20 Aug '20

We are overjoyed to announce the release of: ironic 15.0.1: OpenStack Bare Metal Provisioning This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 15.0.1 ^^^^^^ New Features ************ * Adds a new "[ipmi]use_ipmitool_retries" option. When set to "True" and timing is supported by ipmitool, the number of retries and command interval will be passed to ipmitool so that ipmitool will do the retries. When set to "False", ironic will do the retries. Default is "True". Known Issues ************ * Some BMCs do not support the "Channel Cipher Suites" command that newer versions of ipmitool use. These versions of ipmitool will resend this command for each ipmitool retry, resulting in long response times. Setting "[ipmi]use_ipmitool_retries" to "false" will avoid this situation by implementing retries on the ironic level. * Some redfish-enabled hardware is known not to support persistent boot device setting that is used by the Bare Metal service for deployed instances. The "redfish" hardware type tries to work around this problem, but rebooting such an instance in-band may cause it to boot incorrectly. A predictable boot order should be configured in the node's boot firmware to avoid issues and at least metadata cleaning must be enabled. See this mailing list thread (http://lists.openstack.org/pipermail/openstack- discuss/2020-April/014543.html) for technical details. Bug Fixes ********* * Fixes a rare issue when agent successfully powers off a node after deployment, but ironic never learns about it and does another reboot. * Fixes deployment in fast-track mode by keeping the required internal fields ("agent_url" and "agent_secret_token") intact when starting and finishing deployment and cleaning. * Fixes RAID "apply_configuration" deploy step for "idrac-wsman" where deployment failed with "TypeError". See story 2007963 (https://storyboard.openstack.org/#!/story/2007963) * Cleans up nodes stuck in the "deleting" state on conductor restart. * Fixes deployment hanging on an invalid in-band deploy step in a deploy templates. * Allows deleting nodes with a broken driver unless they require stopping serial console. * Fixes fast-track deployments with the "direct" deploy interface that used to hang previously. * Fixes a bug in "fast track" where Ironic would delete the "agent token" upon exiting cleaning steps. However, if we are in fast track mode, we can preserve the token and continue operations with the agent as it is not powered off during fast track operations. * Fixes json_rpc client connections always using HTTP even if *use_ssl* was set to True. * Fixes a workaround for hardware that does not support persistent boot device setting with the "redfish" or "idrac-redfish" management interface implementation. When such situation is detected, ironic falls back to one-time boot device setting, restoring it on every reboot or power on. For more information, see story 2007733 (https://storyboard.openstack.org/#!/story/2007733) * Fixes fast track deployment preceeded by managed inspection by providing the ironic API URL to the ramdisk so that it can heartbeat. * When Ironic is doing IPMI retries the configured "min_command_interval" should be used instead of a default value of "1", which may be too short for some BMCs. * Fixes missing "agent" RAID compatibility for the "ilo5" and "idrac" hardware type preventing software RAID for working with them. * No longer tries to set "local_gb" to "MAX" when building RAID with the root disk using "MAX" for its size. * To provide a workaround for incorrect boot order problems on some hardware, the "redfish" hardware type now supports the "noop" management interface, similarly to IPMI and SNMP. * Rebooting a node with the "redfish" power interface is now implemented via a power off request followed by power on to avoid returning success when a node stays powered on after the reboot request. * Provides a workaround for hardware that does not support persistent boot device setting with the "redfish" hardware type. When such situation is detected, ironic will fall back to one-time boot device setting, restoring it on every reboot. * Fixes an issue where "ironic-conductor" initialization could return a "NodeNotLocked" error for requests requiring locks when the conductor was starting. This was due to the conductor removing locks after beginning accepting new work. The lock removal has been moved to after the Database connectivity has been established but before the RPC bus is initialized. * Removes stale agent token on rescue and unrescue operations. Previously it would cause subsequent rescue operations to fail. * If the disk format of the image is provided in the instance_info, skip the memory check if it is set to *raw* and raw image streaming is enabled. That allows to stream raw images provided as URL and not through Glance. Other Notes *********** * Ramdisk logs are now collected during cleaning the same way as during deployment. Changes in ironic 15.0.0..15.0.1 -------------------------------- 15ddcad20 Change UEFI PXE job to use tinyipa a61bd3741 Wipe agent token and URL on rescue and unrescue 3730c92ce Update number of VM on ironic-base 528e54c79 Use TLS for json_rpc when configured 2c443946b Fix idrac-wsman RAID apply_configuration 062872bce Remove locks before RPC bus is started ad8697674 Make the final deploy step validation actually fail deploy 2a34baa6f Force RAX hosts to run tinyipa d1fe4b61a Change non-tinyipa jobs to use multiple cores bc4024fac Fixes to skip validation of in-band deploy steps before agent boot 1db4f007e Stop running test_schedule_to_all_nodes in the multinode job 7908a6175 Auto extend the timeout for RAX hosts a4311fb70 Add missing agent RAID compatibility for ilo5 and idrac 4253956c0 Allow deleting nodes with a broken driver 8825f4401 Use min_command_interval when ironic does IPMI retries d35cd6a8b Correct Redfish boot once fallback conditional 798a585ef Stop using md5 for __repr__ of objects dc97a2aa6 add tempest boot_mode config ad072caa5 fix error word confiuration to configuration in docs 27df8e851 Increase vm ram size in uefi netbooted jobs 485dad97b Software RAID: don't try to set local_gb to MAX bde1e8ea1 Fix the error message when reached max number of traits 4baa4fee1 Clean up nodes in DELETING on conductor restart af86e8dc3 Fix fast track following managed inspection 316a868da Fix fast-track with the direct deploy interface 486f58564 Fix agent token and URL handling during fast-track deployment 0915d26cd Fix Redfish handle no continuous override boot src f5a24f741 Enable grenade f17b9e4ab devstack: Use uwsgi binary from path; temporary disable grenade a7e7dcb62 Add IPv6 ci Job d5f6f4d1a devstack: increase concurrency and worker timeout for sushy-tools 9f9a9abfb Fix fast track when exiting cleaning 0645f391d CI: raise DIB jobs memory to 3 GiB 7d9630146 Use ussuri ramdisks e545e567e Increase timeout for introspection in ironic-inspector-tempest 3e52fd389 Increase timeout value for ironic-base job 0adedb2e6 New configuration parameter to use ipmitool retries 2860299df agent: do not hard power off if soft power off actually succeeds 09ff1dbcd Increase callback timeout 995a246a8 Add the noop management interface to the redfish hardware type 1b40644ed change devstack ipa-builder default to BRANCHLESS_TARGET_BRANCH b1dacef6f Do not fail when raw image is larger than memory for http 475682f9b Remove iDRAC Redfish boot device known issue 0f77220df Revert "Deprecate ibmc" 07fd5b92a Collect ramdisk logs also during cleaning 48cfa42c3 Pin the python-ibmcclient upper bounds due to six usage 1e2039a44 redfish: handle hardware that is unable to set persistent boot 5774c3389 Fix pep8 9388ed196 Native zuulv3 grenade job for ironic 08887f8c5 Silence debug messages from oslo_messaging d1a4c44e1 redfish: split reboot into power off followed by power on ba6db8dcd Monkey patch original current_thread _active 3defeea7f Add PXE reset known issue to the docs 134f3b331 CI: migrate UEFI jobs to Cirros 0.5.1 6deed2634 Update TOX_CONSTRAINTS_FILE for stable/ussuri 39e8a1215 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + devstack/common_settings | 30 +-- devstack/lib/ironic | 254 ++++++++++++++++++--- devstack/plugin.sh | 1 + driver-requirements.txt | 2 +- ironic/cmd/__init__.py | 11 +- ironic/common/json_rpc/client.py | 5 +- ironic/common/pxe_utils.py | 2 +- ironic/common/raid.py | 3 +- ironic/common/rpc_service.py | 2 + ironic/common/states.py | 4 +- ironic/conductor/base_manager.py | 34 ++- ironic/conductor/cleaning.py | 29 +-- ironic/conductor/deployments.py | 14 +- ironic/conductor/manager.py | 38 ++- ironic/conductor/task_manager.py | 4 + ironic/conductor/utils.py | 52 +++-- ironic/conf/ipmi.py | 8 + ironic/conf/opts.py | 2 + ironic/db/sqlalchemy/api.py | 12 +- ironic/drivers/drac.py | 8 +- ironic/drivers/ilo.py | 8 +- ironic/drivers/modules/agent.py | 26 +-- ironic/drivers/modules/agent_base.py | 45 ++-- ironic/drivers/modules/drac/raid.py | 2 +- ironic/drivers/modules/ibmc/management.py | 2 - ironic/drivers/modules/ibmc/power.py | 2 - ironic/drivers/modules/ibmc/vendor.py | 2 - ironic/drivers/modules/inspector.py | 3 + ironic/drivers/modules/ipmitool.py | 10 +- ironic/drivers/modules/redfish/management.py | 90 +++++++- ironic/drivers/modules/redfish/power.py | 57 +++-- ironic/drivers/redfish.py | 3 +- ironic/drivers/utils.py | 10 +- ironic/objects/fields.py | 7 +- .../unit/api/controllers/v1/test_allocation.py | 6 +- .../unit/api/controllers/v1/test_conductor.py | 6 +- .../api/controllers/v1/test_deploy_template.py | 6 +- .../unit/api/controllers/v1/test_portgroup.py | 6 +- .../api/controllers/v1/test_volume_connector.py | 6 +- .../unit/api/controllers/v1/test_volume_target.py | 6 +- .../drivers/modules/redfish/test_management.py | 113 +++++++++ .../unit/drivers/modules/redfish/test_power.py | 125 +++++++--- playbooks/legacy/grenade-dsvm-ironic/run.yaml | 121 ---------- playbooks/legacy/ironic-dsvm-base/post.yaml | 15 -- playbooks/legacy/ironic-dsvm-base/pre.yaml | 22 -- .../notes/agent-power-off-2115fcfaac030bd0.yaml | 5 + .../notes/agent-token-817a03776bd46d5b.yaml | 6 + ...-raid-apply-configuration-792ccf195057016b.yaml | 6 + .../notes/cleaning-logs-dc115b0926ae3982.yaml | 5 + releasenotes/notes/deleting-dcdb9cf0d2a6a1a6.yaml | 4 + .../deploy-step-validate-76b2aa97e02ba669.yaml | 5 + .../notes/destroy-broken-8b13de8382199aca.yaml | 5 + .../notes/direct-fast-track-d0f43850b6e80751.yaml | 5 + .../fast-track-with-cleaning-438225116a11662d.yaml | 7 + .../fix-json-rpc-client-ssl-2438a731beb3d5f9.yaml | 5 + ...edfish-sadness-workaround-ed02cb310ff369f4.yaml | 11 + .../inspection-fast-track-ab5165e11d3e9522.yaml | 5 + ...ries-min-command-interval-070cd7eff5eb74dd.yaml | 6 + ...tool-use_ipmitool_retries-b55b2b8ed5cab603.yaml | 16 ++ .../notes/missing-sw-raid-b7fdc9259612970d.yaml | 5 + releasenotes/notes/raid-max-c0920cc44b9779ee.yaml | 5 + .../notes/redfish-noop-mgmt-b61d02b77b1c9d6b.yaml | 6 + .../notes/redfish-power-87062756bce8b047.yaml | 6 + .../notes/redfish-sadness-6e2a37b3f45ef1aa.yaml | 18 ++ .../notes/remove-locks-first-d12ac27106f800f8.yaml | 9 + .../notes/unrescue-token-ae664a17343e0610.yaml | 5 + ...e-format-for-memory-check-25b1f06701ccdc47.yaml | 6 + test-requirements.txt | 1 + tools/bandit.yml | 1 - tox.ini | 18 +- zuul.d/ironic-jobs.yaml | 184 +++++++++++++-- zuul.d/legacy-ironic-jobs.yaml | 45 ---- zuul.d/project.yaml | 6 +- 105 files changed, 1785 insertions(+), 619 deletions(-) Requirements updates -------------------- diff --git a/driver-requirements.txt b/driver-requirements.txt index b8d91d0bc..2d8c9671c 100644 --- a/driver-requirements.txt +++ b/driver-requirements.txt @@ -20 +20 @@ ansible>=2.7 -python-ibmcclient>=0.1.0 +python-ibmcclient>=0.1.0,<0.2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 497bcdc99..a1a53786d 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -24,0 +25 @@ bandit!=1.6.0,>=1.1.0,<2.0.0 # Apache-2.0 +pycodestyle>=2.0.0,<2.6.0 # MIT

1 0

masakari-monitors 8.0.1 (train)
by no-reply＠openstack.org 19 Aug '20

19 Aug '20

We are overjoyed to announce the release of: masakari-monitors 8.0.1: Monitors for Masakari This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/masakari-monitors Download the package from: https://tarballs.openstack.org/masakari-monitors/ Please report issues through: https://bugs.launchpad.net/masakari-monitors/+bugs For more details, please see below. Changes in masakari-monitors 8.0.0..8.0.1 ----------------------------------------- b02c6b6 Use crm_mon for pacemaker-remote deployments 79367dd Update TOX/UPPER_CONSTRAINTS_FILE for stable/train cd673a4 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + masakarimonitors/conf/host.py | 4 + .../hostmonitor/host_handler/handle_host.py | 64 ++++++++- .../hostmonitor/host_handler/parse_crmmon_xml.py | 81 +++++++++++ .../hostmonitor/host_handler/test_handle_host.py | 155 +++++++++++++++++++++ .../host_handler/test_parse_crmmon_xml.py | 78 +++++++++++ tox.ini | 2 +- 7 files changed, 382 insertions(+), 3 deletions(-)

1 0

monasca-agent 3.0.2 (ussuri)
by no-reply＠openstack.org 19 Aug '20

19 Aug '20

We are psyched to announce the release of: monasca-agent 3.0.2: Monitoring agent for gathering metrics and sending them to the Monasca API. This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/monasca-agent Download the package from: https://tarballs.openstack.org/monasca-agent/ Please report issues through: https://bugs.launchpad.net/monasca/+bugs For more details, please see below. Changes in monasca-agent 3.0.1..3.0.2 ------------------------------------- efd7763 Update API version of monitored Cinder 5b34b64 Avoid single quote in help text 2111e39 Convert byte-stream to 'utf-8' Diffstat (except docs and test files) ------------------------------------- monasca_agent/collector/checks_d/http_check.py | 2 +- monasca_setup/detection/plugins/cinder.py | 2 +- monasca_setup/main.py | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-)

1 0

ironic 15.2.0 (victoria)
by no-reply＠openstack.org 18 Aug '20

18 Aug '20

We are happy to announce the release of: ironic 15.2.0: OpenStack Bare Metal Provisioning This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 15.2.0 ^^^^^^ New Features ************ * Adds inband deploy step "flash_firmware_sum" to the "management" interface of the "ilo" and "ilo5" hardware types. The required minimum version for the proliantutils library is 2.9.5. * Adds functionality to the "ipxe" boot interface to support use of an "instance_info\boot_iso" value with the "ramdisk" deployment interface. * Adds functionality to allow a user to supply a node "instance_info/boot_iso" parameter on machines utilizing the "redfish-virtual-media" boot interface. When combined with the "ramdisk" deployment interface, this allows an instance to boot into a user supplied ISO image. * The new **experimental** "agent" power interface allows limited provisioning operations on nodes without BMC credentials. See story 2007771 (https://storyboard.openstack.org/#!/story/2007771) for details. * The "agent" RAID interface now supports building RAID as a deploy step "apply_configuration". * Adds raid configuration validation to deploy step "apply_configuration" of "agent" RAID interface. Also, a post deploy hook has been added to this deploy step to update root device hint. * Adds a new "driver_info" parameter "agent_verify_ca" that allows specifying a file with certificates to use when accessing IPA. Set to "False" to disable certificate validation. * The "deploy" deploy step of the "direct" deploy interface has been split into three deploy steps: * "deploy" itself (priority 100) boots the deploy ramdisk * "write_image" (priority 80) downloads the user image from inside the ramdisk and writes it to the disk. * "prepare_instance_boot" (priority 60) prepares the boot device and writes the bootloader (if needed). Priorities 81 to 99 to be used for in-band deploy steps that run before the image is written. Priorities 61 to 79 can be used for in- band deploy steps that modify the written image before the bootloader is installed. * Provides a new option "[DEFAULT]hash_ring_algorithm" that specifies which cryptographic algorithm to use when building the hash ring. Set to something other than "md5" when using ironic on a system in FIPS mode. * Adds support for boot mode retrieval and setting with the "ilo" and "ilo5" hardware types. * Adds support for running custom in-band deploy steps when provisioning. Step priorities from 41 to 59 can be used for steps that run after the image is written and the bootloader is installed. * Adds the capability for an operator to set a configuration setting which tells the ironic-python-agent it is okay to skip read-only block devices when performing an "erase_devices" cleaning operation. This requires ironic-python-agent version 6.0.0 or greater and can be set using the "[deploy]erase_skip_read_only" configuration option. * The "deploy" deploy step of the "iscsi" deploy interface has been split into three deploy steps: * "deploy" itself (priority 100) boots the deploy ramdisk * "write_image" (priority 80) writes the image to the disk exposed via iSCSI. * "prepare_instance_boot" (priority 60) prepares the boot device and writes the bootloader (if needed). Priorities 81 to 99 to be used for in-band deploy steps that run before the image is written. Priorities 61 to 79 can be used for in- band deploy steps that modify the written image before the bootloader is installed. * The "deploy" deploy step of the "ansible" deploy interface has been split into two deploy steps: * "deploy" itself (priority 100) boots the deploy ramdisk * "write_image" (priority 80) writes the image to the disk and configures the bootloader. Priorities 81 to 99 to be used for in-band deploy steps that run before the image is written. * Adds *network_data* property to the node, a dictionary that represents the node static network configuration. The Ironic API performs formal JSON validation of node *network_data* content against user-supplied JSON schema at driver validation step. * Allow port lists to be filtered by project. Doing so checks the specified project against the port's node's owner and lessee. Deprecation Notes ***************** * Running the whole deployment process as a monolithic "deploy.deploy" deploy step is now deprecated. In a future release this step will only be used to prepare deployment and starting the agent, and special handling will be removed. All third party deploy interfaces must be updated to provide real deploy steps instead and set the "has_decomposed_deploy_steps" attribute to "True" on the deploy interface level. * The configuration options "[json_rpc]http_basic_username" and "[json_rpc]http_basic_password" have been deprecated in favour of the more generic "[json_rpc]username" and "[json_rpc]password". Bug Fixes ********* * Fixes RAID "apply_configuration" deploy step for "idrac-wsman" where deployment failed with "TypeError". See story 2007963 (https://storyboard.openstack.org/#!/story/2007963) * Fixes deployment hanging on an invalid in-band deploy step in a deploy templates. * Allows deleting nodes with a broken driver unless they require stopping serial console. * Fixes updating driver fields for nodes with a broken driver. This is required to be able to set maintenance for such nodes. * Fixes json_rpc client connections always using HTTP even if *use_ssl* was set to True. * When Ironic is doing IPMI retries the configured "min_command_interval" should be used instead of a default value of "1", which may be too short for some BMCs. * Fixes missing "agent" RAID compatibility for the "ilo5" and "idrac" hardware type preventing software RAID for working with them. * Fixes an issue where "ironic-conductor" initialization could return a "NodeNotLocked" error for requests requiring locks when the conductor was starting. This was due to the conductor removing locks after beginning accepting new work. The lock removal has been moved to after the Database connectivity has been established but before the RPC bus is initialized. * Fixes the conductor so the power sync operations are not asserted for nodes in the "adopt failed" state. * Fixes the issue that port auto allocation for the socat console failed to correctly identify the availablility of ports under IPv6 networks. * Removes stale agent tokens when rebooting nodes using API. This prevents lookup failures for nodes that get rebooted between fast- track operations. * Removes stale agent token on rescue and unrescue operations. Previously it would cause subsequent rescue operations to fail. * Fixes the preservation of potentially incorrect power state information when adoption process fails. Power state is now wiped as part of the failure handling process instead of being preserved. Other Notes *********** * The proliantutils library version 2.9.5 enables "ssacli" based in- band deploy step "apply_configuration" of "agent" RAID interface for "ilo" and "ilo5" hardware types. * Support for iPXE booting a ISO medium will only work if the ramdisk loaded by the bootloader contains all artifacts required for the booting operating system to load. This is a limitation of iPXE and x86 systems architecture, as the memory allocated for the rest of the ISO disk image in memory is freed by the booting kernel. * As part of the agent deploy interfaces refactoring, breaking changes will be made to implementations of "AgentDeploy" and "ISCSIDeploy". Third party deploy interfaces must be updated to inherit "HeartbeatMixin", "AgentBaseMixin" or "AgentDeployMixin" from "ironic.drivers.modules.agent_base" instead since their API is considered more stable. * Starting in ironic-python-agent 6.0.0, metadata erasure of read- only devices is skipped by default. * A new method "supports_power_sync" has been added to "PowerInterface". If it returns "False", the conductor will not try to assert power state for the node, merely recording the returned state instead. * The base agent deploy interface code now correctly handles power interfaces that do not support the "power on" action but support "reboot". Changes in ironic 15.1.0..15.2.0 -------------------------------- 0d94ef67c Fix time usage in unit tests for agent power interface 0fc1ca7a2 Enforce autospec in irmc tests 45644c64a [Trivial]Fix some typos in docs 82a2fe4f7 Follow up to I44336423194eed99f026c44b6390030a94ed0522 bc0cc8a8f Adds support SUM based firmware update as deploy step c6c79d143 Enforce autospec in xclarity tests 15fa7ac81 Enforce autospec in test_cinder adcb05a84 agent_client: support custom TLS certificates 00a23de3a Use property plus abstractmethod for abstractproperty 07a7a269b Fix console auto port allocation under IPv6 707b32134 Fix iscsi deploy steps priorities 0b0ab9eb1 Wipe agent token and URL on rescue and unrescue abed175fc Fix error word presistent in docs 013450826 Prevents power sync with ADOPTFAIL nodes ceb0d284b Change UEFI PXE job to use tinyipa ed10d7ed3 Enable deploy-time software RAID in standalone jobs feae197c5 Use TLS for json_rpc when configured 040523ad1 Log the traceback of unexpected errors when verifying power credentials 01772c31e Add cirros-specific FAQ item for troubleshooting 328cb9291 Fix idrac-wsman RAID apply_configuration 4fa65099d Break out collection functions for json usage b6a25d467 Convert v1 controller to plain, return JSON bf1552011 Convert root controller to plain controller 2bc99efe4 Enforce autospec in test_iscsi_deploy 9ca38395b Fix invalid assertTrue which should be assertEqual 52b567e7d Trivial: fix a minor issue in standalone docs and improve formatting 89275bd50 AgentRAID: Account for empty results in post-configuration checks b8e4aba1e Remove locks before RPC bus is started e144453c1 Mark IPv6 job as non-voting to unblock the gate 44d66d351 Reset power state upon adoption failure a1e079cae Make the final deploy step validation actually fail deploy 7a839569a Enforce autospec in some api tests 946087020 Add subsections to the standalone documentation 74e9e1d82 Deprecate http_basic_username and http_basic_password in [json_rpc] a5ce4dd8d Adds raid validation for in-band AgentRAID deploy step cf9188c2d Allow node lessee to see node's ports 6dfc40913 Force RAX hosts to run tinyipa 271d85e99 Update how to release section 67e51af6d Extend PXE boot retry timeout for RAX hosts 9189b4bb2 Add an option to choose the hash ring algorithm 9169085db Extend base build timeouts 1cb1df76d Stop running test_schedule_to_all_nodes in the multinode job 491147752 Document fast-track and the agent power interface 46f8c8575 Add agent power interface e804f6c56 Account for power interfaces that cannot power on 1e28a056b Convert root path / to use plain JSON 0ac401732 Rename Response to PassthruResponse b1328fa99 Remove Link type 5e12d502f Remove File type dc87a189c Update number of VM on ironic-base b1dd9147d Replace oslo_utils.netutils type compares with ipaddress 3750ba62d Auto extend the timeout for RAX hosts 3b6163afd Allow disabling retries in AgentClient.get_command_statuses 02d3efbd7 Explicitly set jobs to ML2/OVS a7ee20501 Enforce autospec in test_notification_utils 5abb3aedc Enforce autospec in test_deployments 0cbb0397b iPXE ISO Ramdisk booting ba0dc574b Follow-up on blocking port deletions 53f751dcf Remove old driver name from cross-gating job 5f557f47f Stop wiping driver_internal_info on node.driver updates bec00bd85 Ironic to use DevStack's neutron"-legacy" module 8c191ceb5 Fixes to skip validation of in-band deploy steps before agent boot a7976b349 Implement get_deploy_steps for AgentRAID d430d1bdb Set min version of tox to 3.2.1 f27fcda53 Use default timeout for all jobs 2d4d37535 Wipe agent token during reboot or power off c376cb321 Add missing agent RAID compatibility for ilo5 and idrac 44cc6dd79 Add wsme core types, remove WSME 8006c9dfd Add json and param parsing to args 44d56c559 Change non-tinyipa jobs to use multiple cores 3d778db0c Add knob for read-only and "erase_devices" 63f6adf68 Decompose the core deploy step on iscsi and ansible deploy bd0033611 Iso booting via redfish virtual media a7445d9f8 Use min_command_interval when ironic does IPMI retries bf65acf6b fix error word presistent in docs 2d814fe60 Remove non-inclusive language 39ca67ac2 fix error word confiuration to configuration in docs ddbc4a6a0 add tempest boot_mode config 2a6b5c14d Decompose the core deploy step of the direct deploy deec7f4a9 agent_base: support inserting in-band deploy steps 8aecabcfe Stop using md5 for __repr__ of objects 22c68cd7f CI: Make ipv6 job to voting 533258815 Allow deleting nodes with a broken driver 217e354a2 Do not validate driver on changing non-driver fields 737076fae Use native oslo.concurrency execution timeout in ipmitool 25dbdb7dc [doc] Describe how to extract an fs UUID from an image c84c6af08 Add `get_node_network_data` to Neutron NetworkInterface e43aee3db Adds boot mode support to iLO management interface f73338c99 Minor agent token log handling 9b4a63aa6 Add RPC objects for deployment API Diffstat (except docs and test files) ------------------------------------- devstack/lib/ironic | 45 +- driver-requirements.txt | 2 +- ironic/api/args.py | 381 +++++++++++ ironic/api/controllers/link.py | 39 +- ironic/api/controllers/root.py | 73 +- ironic/api/controllers/v1/__init__.py | 364 +++++----- ironic/api/controllers/v1/allocation.py | 8 +- ironic/api/controllers/v1/bios.py | 12 +- ironic/api/controllers/v1/chassis.py | 36 +- ironic/api/controllers/v1/collection.py | 54 +- ironic/api/controllers/v1/conductor.py | 12 +- ironic/api/controllers/v1/deploy_template.py | 12 +- ironic/api/controllers/v1/driver.py | 32 +- ironic/api/controllers/v1/node.py | 66 +- ironic/api/controllers/v1/port.py | 59 +- ironic/api/controllers/v1/portgroup.py | 22 +- ironic/api/controllers/v1/state.py | 3 +- ironic/api/controllers/v1/utils.py | 14 +- ironic/api/controllers/v1/volume.py | 25 +- ironic/api/controllers/v1/volume_connector.py | 16 +- ironic/api/controllers/v1/volume_target.py | 16 +- ironic/api/controllers/version.py | 57 +- ironic/api/expose.py | 20 +- ironic/api/method.py | 95 +++ ironic/api/types.py | 744 +++++++++++++++++++-- ironic/common/exception.py | 94 ++- ironic/common/hash_ring.py | 3 +- ironic/common/images.py | 30 +- ironic/common/json_rpc/client.py | 31 +- ironic/common/json_rpc/server.py | 4 +- ironic/common/neutron.py | 159 ++++- ironic/common/pxe_utils.py | 17 +- ironic/common/release_mappings.py | 1 + ironic/common/rpc_service.py | 2 + ironic/common/utils.py | 12 +- ironic/conductor/base_manager.py | 34 +- ironic/conductor/deployments.py | 9 +- ironic/conductor/manager.py | 54 +- ironic/conductor/rpcapi.py | 1 + ironic/conductor/task_manager.py | 17 + ironic/conductor/utils.py | 54 +- ironic/conf/default.py | 10 + ironic/conf/deploy.py | 11 + ironic/conf/json_rpc.py | 12 +- ironic/db/sqlalchemy/api.py | 26 +- ironic/dhcp/neutron.py | 22 +- ironic/drivers/base.py | 12 + ironic/drivers/drac.py | 8 +- ironic/drivers/generic.py | 3 +- ironic/drivers/hardware_type.py | 12 +- ironic/drivers/ilo.py | 8 +- ironic/drivers/modules/agent.py | 180 ++--- ironic/drivers/modules/agent_base.py | 150 ++++- ironic/drivers/modules/agent_client.py | 68 +- ironic/drivers/modules/agent_power.py | 220 ++++++ ironic/drivers/modules/ansible/deploy.py | 58 +- ironic/drivers/modules/console_utils.py | 27 +- ironic/drivers/modules/deploy_utils.py | 23 +- ironic/drivers/modules/drac/raid.py | 2 +- ironic/drivers/modules/ilo/common.py | 27 + ironic/drivers/modules/ilo/management.py | 116 +++- ironic/drivers/modules/ipmitool.py | 53 +- ironic/drivers/modules/ipxe_config.template | 5 + ironic/drivers/modules/iscsi_deploy.py | 57 +- ironic/drivers/modules/network/common.py | 50 +- ironic/drivers/modules/pxe_base.py | 11 +- ironic/drivers/modules/redfish/boot.py | 49 +- ironic/drivers/modules/snmp.py | 9 +- ironic/objects/__init__.py | 1 + ironic/objects/deployment.py | 259 +++++++ ironic/objects/fields.py | 7 +- ironic/objects/node.py | 4 - ironic/objects/port.py | 37 +- .../common/json_samples/neutron_network_show.json | 33 + .../json_samples/neutron_network_show_ipv6.json | 33 + .../common/json_samples/neutron_port_show.json | 59 ++ .../json_samples/neutron_port_show_ipv6.json | 59 ++ .../common/json_samples/neutron_subnet_show.json | 32 + .../json_samples/neutron_subnet_show_ipv6.json | 32 + .../unit/conductor/test_notification_utils.py | 19 +- .../drivers/ipxe_config_boot_from_iso.template | 39 ++ .../unit/drivers/modules/ansible/test_deploy.py | 137 +--- .../unit/drivers/modules/ilo/test_management.py | 450 ++++++++++--- .../drivers/modules/irmc/test_periodic_task.py | 73 +- .../unit/drivers/modules/network/test_flat.py | 5 +- .../unit/drivers/modules/network/test_neutron.py | 9 +- .../unit/drivers/modules/redfish/test_boot.py | 200 +++++- .../unit/drivers/modules/storage/test_cinder.py | 7 +- .../unit/drivers/modules/test_agent_client.py | 97 ++- .../unit/drivers/modules/test_console_utils.py | 47 +- .../unit/drivers/modules/test_deploy_utils.py | 14 + .../unit/drivers/modules/test_iscsi_deploy.py | 249 +++---- .../drivers/modules/xclarity/test_management.py | 5 +- .../unit/drivers/modules/xclarity/test_power.py | 26 +- lower-constraints.txt | 6 +- ...nsible-python-interpreter-2035e0f23d407aaf.yaml | 4 +- ...update-firmware-using-sum-cfee84a19120dd3c.yaml | 11 + ...add-ipxe-boot-iso-support-6ae2f5cc2250be3e.yaml | 12 + ...ish-boot_iso-pass-through-8a6f4d0c98ada1d5.yaml | 8 + .../notes/agent-power-a000fdf37cb870e4.yaml | 6 + .../notes/agent-raid-647acfd599e83476.yaml | 5 + .../agent-raid-validate-f7348ac034606b83.yaml | 6 + .../notes/agent-verify-ca-ddbfbb0f27198d82.yaml | 6 + ...-raid-apply-configuration-792ccf195057016b.yaml | 6 + .../deploy-step-validate-76b2aa97e02ba669.yaml | 5 + .../notes/destroy-broken-8b13de8382199aca.yaml | 5 + .../direct-deploy-steps-36486987156017d7.yaml | 17 + .../notes/driver-maintenance-0945c2939fa4e917.yaml | 5 + .../fix-json-rpc-client-ssl-2438a731beb3d5f9.yaml | 5 + ...-option-for-software-raid-baa2cffd95e1f624.yaml | 2 +- .../notes/hash-ring-algo-4337c18117b33070.yaml | 7 + ...boot-mode-management-apis-8173002daf79894c.yaml | 5 + .../notes/in-band-steps-e4a1fe759029fea5.yaml | 23 + ...se_devices-skip-read-only-9f8cd9278c35a84e.yaml | 12 + ...ries-min-command-interval-070cd7eff5eb74dd.yaml | 6 + .../iscsi-ansible-steps-817b52269d2455b0.yaml | 28 + .../json_rpc_http_basic-42dfc6ca2471a30e.yaml | 6 + .../notes/missing-sw-raid-b7fdc9259612970d.yaml | 5 + .../notes/no-power-on-842b21d55b07a632.yaml | 9 + .../notes/node-network-data-6f998aaa57020f4b.yaml | 7 + .../port-list-by-project-8cfaf3b2cf0dd627.yaml | 5 + .../notes/remove-locks-first-d12ac27106f800f8.yaml | 9 + ...-power-sync-for-adoptfail-d2498f1a2e997ed7.yaml | 5 + ...t-console-port-alloc-ipv6-26760f53f86209d0.yaml | 5 + .../notes/token-reboot-b48b5981a58a30ae.yaml | 5 + .../notes/unrescue-token-ae664a17343e0610.yaml | 5 + ...wer-state-on-adopt-failed-09194c8269c779de.yaml | 7 + requirements.txt | 7 +- setup.cfg | 1 + tools/bandit.yml | 1 - tox.ini | 10 +- zuul.d/ironic-jobs.yaml | 112 ++-- zuul.d/project.yaml | 8 +- 193 files changed, 8135 insertions(+), 2294 deletions(-) Requirements updates -------------------- diff --git a/driver-requirements.txt b/driver-requirements.txt index bb016f26e..539d27ba9 100644 --- a/driver-requirements.txt +++ b/driver-requirements.txt @@ -7 +7 @@ -proliantutils>=2.9.1 +proliantutils>=2.9.5 diff --git a/requirements.txt b/requirements.txt index 9a59e6777..9f7593b3c 100644 --- a/requirements.txt +++ b/requirements.txt @@ -13 +13 @@ python-glanceclient>=2.8.0 # Apache-2.0 -keystoneauth1>=3.18.0 # Apache-2.0 +keystoneauth1>=4.2.0 # Apache-2.0 @@ -19 +19 @@ pysendfile>=2.0.0;sys_platform!='win32' # MIT -oslo.concurrency>=3.26.0 # Apache-2.0 +oslo.concurrency>=4.2.0 # Apache-2.0 @@ -37 +36,0 @@ jsonpatch!=1.20,>=1.16 # BSD -WSME>=0.9.3 # MIT @@ -46 +45 @@ futurist>=1.2.0 # Apache-2.0 -tooz>=1.58.0 # Apache-2.0 +tooz>=2.7.0 # Apache-2.0

1 0

ironic-python-agent 6.3.0 (victoria)
by no-reply＠openstack.org 18 Aug '20

18 Aug '20

We are chuffed to announce the release of: ironic-python-agent 6.3.0: Ironic Python Agent Ramdisk This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/ironic-python-agent Download the package from: https://tarballs.openstack.org/ironic-python-agent/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic- python-agent For more details, please see below. 6.3.0 ^^^^^ New Features ************ * The new kernel parameter "ipa-advertise-protocol" can be used to change the protocol of the callback URL to "https". * The "deploy.erase_devices_metadata" clean step can now also be used as a deploy step. * Introspection of PCI devices now collects PCI class, revision and PCI bus. * Adds a Poll extension which provides the ability to retrieve hardware information as well as set node data from API. This feature is required for poll mode deployment driven by ironic. Bug Fixes ********* * Fixes the return value of the "apply_configuration" deploy step: the "agent" RAID interface expects the final RAID configuration to be returned. * Fixes an issue where the bootloader installation can fail on a software RAID volume when no root_device hint is set. See Story 2007905 (https://storyboard.openstack.org/#!/story/2007905) * Fixes retry logic issues with the Agent Lookup which can result in the lookup failing prematurely before being completed, typically resulting in an abrupt end to the agent logging and potentially weird errors like TypeError being reported on the agent process standard error output. For more information see bug 2007968 (https://storyboard.openstack.org/#!/story/2007968) * Fixes an issue with the ironic-python-agent where we would call to setup the bootloader, which is necessary with software raid, but also attempt to clean up iSCSI. This can cause issues when using the "direct" "deploy_interface". Now the agent will only clean up iSCSI connections if iSCSI was explicitly started. For more information, please see story 2007937 (https://storyboard.openstack.org/#!/story/2007937) * Devices with size 0 are now ignored when collecting inventory. Some hardware represents virtual floppy devices this way, see e.g. https://www.dell.com/community/Systems-Management-General/How-to- disable-iDRAC-Virtual-CD/td-p/4734424 Changes in ironic-python-agent 6.2.0..6.3.0 ------------------------------------------- 1580781 Revert "Switch the inspector job to tinyIPA until DIB is fixed" 353d09c Support changing the protocol part of callback_url to https 5eab9bc Fix TypeError on agent lookup failure b424fbf Extends pci devices metrics ce53863 Examples: add deploy_steps examples 9830f3c set EVENTLET_NO_GREENDNS to 'yes' 7fb098a Import example hardware managers from ipa-example-hardware-managers f03d720 Return the final RAID configuration from apply_configuration eb87651 Allow erase_devices_metadata to be used as a deploy step bc57788 Update version of hacking 52cc87e Revert jobs to dib 80e1181 More refactoring of the image module 5e95b13 Fix bootloader install issue with MDRAID ab58515 Fix versions in release notes 2a56ee0 Prevent un-needed iscsi cleanup c66bec0 Set min version of tox to 3.2.1 6bde89e Update jobs 1f3b70c Ignore devices with size 0 when collecting inventory 61c9555 Adds poll mode deployment support 4ba9ce6 Hint 404 lookup failures for Operators Diffstat (except docs and test files) ------------------------------------- examples/README.rst | 43 +++++ examples/business-logic/example_business_logic.py | 194 +++++++++++++++++++++ examples/business-logic/setup.cfg | 19 ++ examples/business-logic/setup.py | 6 + examples/vendor-device/example_device.py | 152 ++++++++++++++++ examples/vendor-device/setup.cfg | 20 +++ examples/vendor-device/setup.py | 6 + ironic_python_agent/__init__.py | 19 ++ ironic_python_agent/agent.py | 98 ++++++----- ironic_python_agent/cmd/agent.py | 3 +- ironic_python_agent/config.py | 13 +- ironic_python_agent/extensions/image.py | 74 ++++---- ironic_python_agent/extensions/iscsi.py | 3 +- ironic_python_agent/extensions/poll.py | 43 +++++ ironic_python_agent/hardware.py | 56 +++++- ironic_python_agent/inspector.py | 33 +++- ironic_python_agent/ironic_api_client.py | 51 ++++-- lower-constraints.txt | 2 +- .../notes/advertise-protocol-110ae1587f727e62.yaml | 5 + .../notes/apply-raid-aeca7848c6320d6b.yaml | 6 + .../notes/erase-deploy-step-3e952fa863bca908.yaml | 5 + .../notes/extend-pci-metric-5482284d6a9fe765.yaml | 4 + ...oader-install-with-mdraid-0a254035df9d0bed.yaml | 7 + ...ixes-agent-lookup-retries-1b4bb90b8e783aca.yaml | 9 + releasenotes/notes/poll-mode-063bd36b2b18bffb.yaml | 6 + ...nt-needless-iscsi-cleanup-f8d602c0abc7e8ba.yaml | 9 + releasenotes/notes/zero-size-78d3be2ac8fd59c2.yaml | 6 + releasenotes/source/train.rst | 2 +- releasenotes/source/ussuri.rst | 6 +- setup.cfg | 1 + test-requirements.txt | 2 +- tox.ini | 11 +- zuul.d/ironic-python-agent-jobs.yaml | 43 ++++- zuul.d/project.yaml | 15 +- 42 files changed, 1097 insertions(+), 155 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 0565105..d07515f 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ -hacking>=3.0.1,<3.1.0 # Apache-2.0 +hacking>=3.1.0,<3.2.0 # Apache-2.0

1 0

openstack-ansible 21.0.0 (ussuri)
by no-reply＠openstack.org 14 Aug '20

14 Aug '20

We are amped to announce the release of: openstack-ansible 21.0.0: Ansible playbooks for deploying OpenStack This release is part of the ussuri release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 21.0.0 ^^^^^^ New Features ************ * Support is added for deploying OpenStack on CentOS 8 with source and distro based installs. However, nspawn support can't be offered, as machinectl relies on btrfs which has been dropped by CentOS. * Support is added for deploying OpenStack on Ubuntu Focal (20.04) with source based installs. Ubuntu Cloud Archive is not available for Focal at this point so it is not possible to offer distro package based installs for Focal. * Multiple HAProxy nodes can now be deployed in an HA configuration with keepalived and LetsEncrypt certificates. Certbot can be treated as a backend service for haproxy and acme-challenge requests from LetsEncrypt can be directed to whichever HAProxy server is running a certificate renewal. New variables are defined for frontend ACLs and options to be passed to Certbot which enable this new feature, but the majority of the required configuration is done via the existing HAProxy service setup. An example is provided in the documentation. * Added variables *cinder_active_active_cluster* and *cinder_active_active_cluster_name* that allow to explicitly enable or disable active/active feature, and set cluster name. * The galera_server role now includes the functionality from the galera_client role, and can optionally install the client and server components. This is controlled using two booleans, galera_install_server and galera_install_client, both of which default to false. Upgrade Notes ************* * The galera_server role now includes the functionality from the galera_client role, and as a result a number of the variables from the galera_client defaults are now available to override in the galera_server role defaults. In addition, a number of default variables have been generalised, removing the specific *_client_* or *_server_* parts of the names. Users of this role should check that any overrides they are using have the correct variables names for the new combined role. Deprecation Notes ***************** * To provide compatibility with Centos-8 the LXC cache preparation has been greatly simplified to remove the requirement for machinectl and btrfs, which is a combination not available on Centos-8. This has the side effect of machinectl no longer being a supported backing store for LXC. * Fedora is no longer tested in CI for each commit. * *rabbitmq_install_method: file* is deprecated now and will be removed in the Wallaby release. As for now supported options are only *external_repo* and *distro*. Among with that the following variables are deprecated and prepared for the removal: * rabbitmq_package_url * rabbitmq_package_sha256 * rabbitmq_package_path Variable *rabbitmq_release_version* has been removed as not used anymore. Changes in openstack-ansible 20.0.0.0rc1..21.0.0 ------------------------------------------------ a21b05dd3 Bump SHAs for stable/ussuri 54d10eea9 Add ubuntu focal distro jobs b3bc33f52 Always use the utility host for service setup tasks 5e396a182 Fix ceph deployment for CentOS 7 b74d2bbd2 Rename mysql to mariadb for registered var 1d9f2631a Add documentation for deploying letsencrypt certificates c8332c5dd Fix management address lookup for metal hosts in some deployments 4a0325bfd Add rsync package for New CentOS-8 minimal installs d25d301c3 Fix gate job for aio_metal template e3a0384e2 Fix mysql binary name fb4c00c78 Remove package cache proxy cleanup 2fc0370f9 Add Centos-8 support 739f0d82c Bump role SHA for ussuri 621705d72 Ensure distro packages are present for utility wheel build 59deac41e Fix KeyError raised when max hostname length exceeded 7f58002b8 Fix tmpfiles-setup wait handler c353ccded Bump SHAs for stable/ussuri 35c84c4d5 Disable test_swift_acl_anonymous_download test f8225264f Fix the name of the renamed network for trove 41e33b2a3 Add Ubuntu Focal support 16a96ff21 Cleanup ansible_python_interpreter 5e61842b1 Wait for systemd-tmpfiles-setup service to complete after container restart 441b36f47 Add murano to required_projects 08a926c9f Correct a typo in the document c513e6881 Remove git repo haproxy backend 0830ba6c4 Update default requirements_git_url for utility e72cfbd94 Only use zuul cloned git repos for code hosted at opendev.org 67f6afa51 Fix default openstack_deploy dir evaluation 268c66c6b Resolve issue with undefined facts while running with tags 4c4c65c16 Fix inventory_manage when the component for a host is not defined 47aace556 Rewrite CI provided apt sources to be http instead of https on focal 863b0487d auto-detect interpreter. e6f963123 Use ansible openstack collection fd045e4aa Remove pre-gate cleanup tasks for the new plain CI images 2759fea0e Add ansible openstack collection b5de032b4 Update TOX_CONSTRAINTS_FILE for stable/ussuri e0579f07e Update .gitreview for stable/ussuri b6b6f6eb7 Create Ussuri d41350808 Remove retired congress 465a1fea4 Rewrite CI provided apt sources to be http instead of https on bionic 3fc02402f Return lxc jobs 2679b80f2 Update ceph release to octopus de67ccbac Use galera server role to install galera client 5d8000967 Update docstheme for style 5bb49c4e8 Include openstack_services.yml as vars file for Gnocchi role 8dc271b1e Update Magnum fedora image name db75cb936 Enable octavia tempest tests 6185adefa [ussuri][goal] Update contributor documentation 2e0dfc240 Bump ansible version to 2.9.9 7171aecdf Increase disk size for manila service VM during tests 77f728398 Imported Translations from Zanata 7bb347db8 Drop proprietary repo usage for libselinux-python3 70a00cc28 Fix variables gathering for add-compute script cf0f3a37f Local facts are strings so make this explicit 7c5a6d4d4 Imported Translations from Zanata 648effa56 Don't do cleanup for Suse images 25a303632 Move openSUSE to experimental status 51631a5e3 Suppress errors when ara is not installed 3cd981999 [doc] Adjust deploy-guide to install py3 cc7ff5fd4 Fix horizon_image_upload_mode naming 2860f1bda Update hacking for Python3 d719094a0 Update ansible to 2.9.7 473c5439c Use btrfs-progs instead of btrfs-tools 0546ab4bd Imported Translations from Zanata 8e28b8e85 Install python3 instead of python2 during host bootstrapping. fec7887e8 Rewording Limited Connectivity for clarity b7c6b42d5 Use defined keepalived track_scripts 47090c82c Bump SHAs for master f9fd3c3ad Disable test_list_user_groups temepst test 2deabaeb4 Fix latest_tag rendering for stable versions 5d94b5b6c Fix update of the deploy guide 656a8dcd0 [doc] Update maturity matrix 560fc2d44 Grammar Cleanup - Maintenance Tasks ef76ec297 Change glance haproxy balancing method ba8032c5c [doc] Add Debian buster to the list of supported OS 600b23b1a [doc] Add line to distribute nova keys 0b7d97bea Update global-requirement-pins 189704a0c Update ansible to 2.8.10 4d0510bcf Update used cirros images 6db97829c Bump SHAs for master 6265118a9 Imported Translations from Zanata 9c0266082 [doc] Add firewall configuration step of quickstart guide ed35aa04c Bump SHAs for master b4665609e Add support to deploy zun f05af2d77 Add default value for user_role_file when cloning git repos 934ea56e2 Imported Translations from Zanata 30dd0337e Imported Translations from Zanata 869f18580 Set bionic upgrade job to voting 2e277de55 Upate deployment verifiation endpoint example b3932f0e8 Use zuul cached repos for openstack services 8176d320d Bump SHAs for master e42b2898c ceph: run handlers after common 3505cab50 Update limited connectivity guide for easy_install configuration b04481c82 Re-order gate cleanup pip package removal 8275bd045 Add CONTRIBUTING.rst bb01eedcd Add compute node deployment script 2e80e5335 Add missing horizon dashboard variables 7589b6ec3 Imported Translations from Zanata 772059734 [ussuri][goal] Drop python 2.7 ce8439706 Add magnum tempest test 0ed271ddd Imported Translations from Zanata 932baa2cf Add magnum image upload CI 78adec035 manila: refactor playbooks fb1a66e03 python3: use backported libselinux-python3 853dec794 ci: disable upgrade jobs 6bf489753 Bump SHAs for master 9d2a3c07e [doc] Add placement definition to config samples 5eeec731c Ensure utility binaries link to the latest versions 23c3bca4e Set bionic upgrade job to voting 5a9750eb1 Imported Translations from Zanata 3800754c1 Drop virtualenv pip package for CI 4d9b568f6 Fix idempotency for os-lxc-container-setup.yml 893aa5102 Add manila_service_region 0b9a302a2 manila: stop including all hosts in haproxy 2a7edfb03 Do not append container_name for metal containers 8a2ea4d3e Add manila tempest testing 83dbd97f2 Bump SHAs for master 23bf332db Imported Translations from Zanata 75f2f0f86 Bump ansible version to 2.8.8 1f50c8b53 Add ceph-mds and ceph-nfs setup a1eb06048 Document user-role-requirements.yml 9ce120468 Install appropriate tempest releases on stable branches 18a35faea Allow ceph metal CI deployments 75879a02d Remove log compression before upload aa79d8186 Set fixed version for networking-calico 6c6f25f81 Bump SHAs for master be1bf3084 Update ansible to 2.8.7 8d8a8ecd9 Imported Translations from Zanata 13f5b3e95 [doc] Add placement definition to config sample 7313764be Imported Translations from Zanata 350c92ea9 Deploy heat with magnum 6eb90b8f1 Bump SHAs for master c30ac4b96 Imported Translations from Zanata 2c4738918 Document container_extra_networks usage d7a05389c Use py3 for venvs for all OS 2224cf162 Imported Translations from Zanata 2ac3c8afd Drop pip-conf-removal.yml from docs 9a05b6fd5 Update Train Release date 88bb4d33d Drop pip-conf-removal task be89da6a1 Make upgrade script respect OSA_CONFIG_DIR 2e8474efb Set neutron_service_region in group_vars 827b2e992 Add reno regarding buster support 00d71feb8 Remove murano from os-infra_containers 280ddcee9 Imported Translations from Zanata f66b4b277 Install chrony on AIO e4f3da81c Set CentOS upgrade jobs to non-voting e46d1ebe2 Don't install python2 for Debian 573420763 Revert "Add nova placement to placement migration" 7c837594c Bump SHAs for master 46358ae9d Move debian jobs to buster 6729ad423 Use unconfined apparmor profiles on Debian Buster. 94e477032 Don't require provider_networks with no_containers be4360588 Imported Translations from Zanata ed625067b Removes package cache references from yum config 41fa31325 Install galera client for placement migration 1bd21d80e Disable journald-remote playbook 384ae93a9 Roll back use of tempest smoke test for the integrated repo 096691d2e Adding missing tag for dynamic-address-fact task 69bee0fe6 Bump SHAs for master 28da36da7 Imported Translations from Zanata 97d448f22 Update inventory group/user_secrets for inspector change in Ironic 23c34a79a Change rabbitmq_package_state logic b3de0e3f9 Collect etcd logs ee679637f Fix core-reviewer source link. 1aa0aad4c Imported Translations from Zanata 717534356 Bump SHAs for master e5a6a1416 Fix requirements_git_url call 035136af6 Switch upgrade jobs to Ussuri cycle b8cd59c56 Add ceph-ansible filter plugins path to openstack-ansible.rc 9f9bfae7e Run setup module prior to bootstrapping aio 94eac3cb3 Fix spice-html5 git repo a61c5aa4d Add metal upgrade jobs 3fbc5b959 Start Ussuri cycle 8971ab3b2 Drop rabbitmq_apply_openstack_policies a1b567df1 Install python3 distro packages in the utility playbook 99439227c Imported Translations from Zanata 57d5a127b Add locale override for space identification bb863c176 Update docs regarding train release 4ce8c74c9 Update master for stable/train a224a2b65 Replace deprecated "lvm_share_export_ip" opt 0ff6e1fb3 Add support to deploy murano 655d265df tox: Keeping going with docs 9b1f331d9 Use bootstrap_host_scenarios_expanded for services b5c288277 Add cloudkitty and zun to a-r-r 88360784d Imported Translations from Zanata af588a44a Switch to opensuse-15 nodeset Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- CONTRIBUTING.rst | 19 + ansible-collection-requirements.yml | 4 + ansible-role-requirements.yml | 240 ++--- deploy-guide/source/conf.py | 47 +- deploy-guide/source/overview-requirements.rst | 4 +- deploy-guide/source/targethosts-prepare.rst | 17 +- .../admin/maintenance-tasks/ansible-modules.rst | 50 +- .../admin/maintenance-tasks/inventory-backups.rst | 4 +- .../admin/maintenance-tasks/rabbitmq-maintain.rst | 26 +- .../admin/openstack-operations/verify-deploy.rst | 14 +- .../reference/configuration/advanced-config.rst | 1 + .../reference/configuration/extending-osa.rst | 22 + .../reference/configuration/extra-networks.rst | 62 ++ etc/openstack_deploy/conf.d/ceph.yml.aio | 8 + etc/openstack_deploy/conf.d/ironic.yml.aio | 4 + etc/openstack_deploy/conf.d/murano.yml.aio | 3 + etc/openstack_deploy/conf.d/murano.yml.example | 8 + etc/openstack_deploy/conf.d/zun.yml.aio | 7 + etc/openstack_deploy/conf.d/zun.yml.example | 9 + etc/openstack_deploy/env.d/aio_metal.yml.example | 9 + etc/openstack_deploy/openstack_user_config.yml.aio | 1 + .../openstack_user_config.yml.aio.j2 | 1 + .../openstack_user_config.yml.example | 2 +- .../openstack_user_config.yml.prod-ceph.example | 14 + .../openstack_user_config.yml.prod.example | 9 + ...openstack_user_config.yml.provnet-group.example | 9 + .../openstack_user_config.yml.test.example | 5 + etc/openstack_deploy/user_secrets.yml | 22 + .../user_variables.yml.prod-ceph.example | 1 - global-requirement-pins.txt | 9 +- inventory/env.d/ceph.yml | 28 + inventory/env.d/ironic.yml | 16 +- inventory/env.d/murano.yml | 38 + inventory/env.d/zun.yml | 36 + inventory/group_vars/all/all.yml | 10 +- inventory/group_vars/all/ceph.yml | 6 +- inventory/group_vars/all/glance.yml | 2 +- inventory/group_vars/all/horizon.yml | 2 +- inventory/group_vars/all_containers.yml | 2 +- inventory/group_vars/ceph_all.yml | 38 +- inventory/group_vars/haproxy/haproxy.yml | 35 +- inventory/group_vars/haproxy/keepalived.yml | 8 +- inventory/group_vars/horizon_all.yml | 3 + inventory/group_vars/manila_all.yml | 9 +- inventory/group_vars/murano_all.yml | 26 + inventory/group_vars/neutron_all.yml | 2 + inventory/group_vars/rabbitmq_all.yml | 3 +- inventory/group_vars/utility_all.yml | 62 +- inventory/inventory.ini | 13 +- osa_toolkit/filesystem.py | 26 +- osa_toolkit/generate.py | 35 +- osa_toolkit/manage.py | 3 + playbooks/ceph-install.yml | 97 +- playbooks/ceph-nfs-install.yml | 67 ++ playbooks/ceph-rgw-install.yml | 18 +- playbooks/ceph-rgw-keystone-setup.yml | 10 +- playbooks/common-playbooks/cinder.yml | 10 +- playbooks/common-playbooks/glance.yml | 8 +- playbooks/common-playbooks/neutron.yml | 10 +- playbooks/common-playbooks/nova.yml | 12 +- playbooks/common-tasks/ceph-server.yml | 61 +- playbooks/common-tasks/os-lxc-container-setup.yml | 16 +- playbooks/common-tasks/package-cache-proxy.yml | 67 -- playbooks/containers-lxc-create.yml | 11 +- playbooks/containers-lxc-host.yml | 10 +- playbooks/containers-nspawn-create.yml | 14 +- playbooks/containers-nspawn-host.yml | 8 +- playbooks/defaults/ceph_ansible.yml | 2 - playbooks/defaults/distro_install.yml | 1 + playbooks/defaults/healthchecks-vars.yml | 6 +- playbooks/defaults/repo_packages/gnocchi.yml | 3 +- playbooks/defaults/repo_packages/nova_consoles.yml | 12 +- .../defaults/repo_packages/openstack_services.yml | 203 ++-- playbooks/defaults/source_install.yml | 4 + playbooks/etcd-install.yml | 8 +- playbooks/galera-install.yml | 13 +- playbooks/haproxy-install.yml | 8 +- playbooks/healthcheck-infrastructure.yml | 2 +- playbooks/healthcheck-openstack.yml | 48 +- playbooks/infra-journal-remote.yml | 8 +- playbooks/memcached-install.yml | 8 +- playbooks/openstack-hosts-setup.yml | 20 +- playbooks/os-aodh-install.yml | 8 +- playbooks/os-barbican-install.yml | 8 +- playbooks/os-blazar-install.yml | 12 +- playbooks/os-ceilometer-install.yml | 8 +- playbooks/os-congress-install.yml | 12 +- playbooks/os-designate-install.yml | 8 +- playbooks/os-gnocchi-install.yml | 8 + playbooks/os-heat-install.yml | 8 +- playbooks/os-horizon-install.yml | 8 +- playbooks/os-ironic-install.yml | 8 +- playbooks/os-keystone-install.yml | 10 +- playbooks/os-magnum-install.yml | 7 + playbooks/os-manila-install.yml | 52 +- playbooks/os-masakari-install.yml | 8 +- playbooks/os-mistral-install.yml | 12 +- playbooks/os-murano-install.yml | 43 + playbooks/os-octavia-install.yml | 8 +- playbooks/os-panko-install.yml | 8 +- playbooks/os-placement-install.yml | 23 +- playbooks/os-rally-install.yml | 8 +- playbooks/os-sahara-install.yml | 6 + playbooks/os-swift-install.yml | 9 +- playbooks/os-tacker-install.yml | 8 +- playbooks/os-tempest-install.yml | 9 +- playbooks/os-trove-install.yml | 8 +- playbooks/os-zun-install.yml | 66 ++ playbooks/qdrouterd-install.yml | 9 +- playbooks/rabbitmq-install.yml | 11 +- playbooks/repo-install.yml | 8 +- playbooks/rsyslog-install.yml | 8 +- playbooks/security-hardening.yml | 8 +- playbooks/setup-infrastructure.yml | 6 + playbooks/setup-openstack.yml | 2 + playbooks/unbound-install.yml | 11 +- playbooks/utility-install.yml | 51 +- .../add-centos-8-support-af546bd6ca3b10cd.yaml | 7 + .../notes/add-focal-support-54ae4be4f524db7b.yaml | 7 + .../notes/add-iptables-5ff8c4317e2e8498.yaml | 2 +- .../notes/add-murano-to-repo-ffsdgsdhgb332 | 4 + .../notes/add-zun-to-repo-169a09b4ab52c1f7.yaml | 4 + releasenotes/notes/apt_repo-097cb34c12e60207.yaml | 7 + .../blockinfile_hosts_file-0959a64a030c8888.yaml | 7 + .../ceph-backend-host-change-968edfbc15b59b0a.yaml | 2 +- .../ceph_ceph_conf_overrides-7b3a09ac34f94a6b.yaml | 7 + .../ceph_keyrings_in_files-7d6a01e64861f8c6.yaml | 15 + .../notes/certbot_ha-83b56aed3f360dba.yaml | 11 + ...der-init-config-overrides-9e495aee023deed6.yaml | 2 +- ...der_active_active_cluster-62674205a3259902.yaml | 6 + ...tty-init-config-overrides-ffce7e419061c4da.yaml | 10 + ...dkitty-service-setup-host-9bd1d7372c501606.yaml | 17 + ...dkitty_init_time_settings-cba85875093eac61.yaml | 23 + .../notes/combine-client-d6b135b9957d55ee.yaml | 17 + .../notes/debian-buster-9c62d1182166545e.yaml | 9 + .../disable-journald-remote-33d3b43e538786ed.yaml | 13 + .../notes/drop-machinectl-5053dc9833535cd9.yaml | 8 + .../notes/drop-py-2-7-ff5e69d0456fbf4c.yaml | 5 + .../fedora-latest-support-bf58ecd96cc8fbd4.yaml | 4 + ...eat-init-config-overrides-004872081661a34c.yaml | 2 +- ...nic-init-config-overrides-e73d9fd46a69afcf.yaml | 2 +- .../notes/journal-log-cfbr504hd9b49612.yaml | 5 + .../keystone-openrc-v2-show-0bbfc8ab1dba8bd6.yaml | 5 + .../notes/libvirt_packages-e826dec75312c077.yaml | 5 + ...num-init-config-overrides-aec21cbbd9da8e4e.yaml | 2 +- .../notes/magnum_resources-84e50dbaebac7d1c.yaml | 8 + .../notes/mod-auth-openidc-102bd253b677f3fc.yaml | 16 + .../murano-horizon-panel-7875a53d695ba3f0.yaml | 9 + ...ng-generic-switch-support-6ae4be93aa50a7c3.yaml | 7 + ...udkitty-only-install-venv-449f52f2cf8a5e98.yaml | 5 + ...ssaging-separate-backends-601acca3643bd90c.yaml | 19 + .../notes/package-state-34d9aa6d4c7aeffe.yaml | 14 + .../rabbit_install_method-b1defcd376f3bf87.yaml | 13 + .../notes/remove-fax-fail-5038b4b6eb4951b3.yaml | 2 +- .../notes/remove-pki-support-d13581d93f245e92.yaml | 4 + .../remove-requirements-git-ecb194a280b34192.yaml | 7 + .../notes/remove_rpc_backend-1987334512353568.yaml | 4 + .../removed-trusty-support-e312476a237187f5.yaml | 4 + .../notes/session_engine-54753c41d355e34e.yaml | 11 + .../notes/suse_experimental-247d141fe0381f21.yaml | 7 + .../notes/tempestconf-extras-38a14ff705161872.yaml | 14 + releasenotes/source/conf.py | 16 +- releasenotes/source/index.rst | 1 + .../source/locale/id/LC_MESSAGES/releasenotes.po | 1067 ++++++++++++++++++-- releasenotes/source/train.rst | 6 + requirements.txt | 2 - scripts/add-compute.sh | 88 ++ scripts/ansible-role-requirements-editor.py | 5 +- scripts/bootstrap-ansible.sh | 30 +- scripts/gate-check-commit.sh | 37 +- scripts/get-ansible-role-requirements.yml | 24 +- scripts/log-collect.sh | 14 +- scripts/openstack-ansible.rc | 5 +- scripts/openstack-ansible.sh | 2 +- scripts/release-yaml-file-prep.py | 7 +- scripts/run-upgrade.sh | 13 +- scripts/scripts-library.sh | 20 +- .../upgrade-utilities/deploy-config-changes.yml | 42 +- .../galera-cluster-rolling-restart.yml | 10 +- test-requirements.txt | 2 +- .../bootstrap-host/tasks/check-requirements.yml | 5 + .../bootstrap-host/tasks/prepare_aio_config.yml | 42 +- .../templates/user_variables.aio.yml.j2 | 34 +- .../templates/user_variables_ceph.yml.j2 | 5 +- .../templates/user_variables_magnum.yml.j2 | 71 ++ .../templates/user_variables_manila.yml.j2 | 72 +- .../templates/user_variables_murano.yml.j2 | 30 + .../templates/user_variables_octavia.yml.j2 | 23 + .../templates/user_variables_translations.yml.j2 | 4 +- .../templates/user_variables_zun.yml.j2 | 18 +- tox.ini | 57 +- zuul.d/jobs.yaml | 180 +++- zuul.d/playbooks/pre-gate-cleanup.yml | 55 + zuul.d/playbooks/pre-gate-scenario.yml | 4 +- zuul.d/playbooks/pre-osa-aio.yml | 9 +- .../playbooks/templates/osa-gate-scenario.yml.j2 | 2 +- zuul.d/project-templates.yaml | 78 +- 234 files changed, 5608 insertions(+), 2026 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 3064f4781..6a94d1d4e 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6 +5,0 @@ pyOpenSSL>=17.1.0 # Apache-2.0 -ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD @@ -11 +9,0 @@ PyYAML>=3.12 # MIT -virtualenv>=14.0.6 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index faa6d2423..f49cb49c4 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ -hacking>=1.1.0,<1.2.0 # Apache-2.0 +hacking>=3.0,<3.1.0 # Apache-2.0

1 0

ironic-prometheus-exporter 2.1.0 (victoria)
by no-reply＠openstack.org 13 Aug '20

13 Aug '20

We are psyched to announce the release of: ironic-prometheus-exporter 2.1.0: Prometheus Exporter for Ironic Hardware Sensor data This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/ironic-prometheus-exporter Download the package from: https://tarballs.openstack.org/ironic-prometheus-exporter/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic- prometheus-exporter For more details, please see below. Changes in ironic-prometheus-exporter 2.0.0..2.1.0 -------------------------------------------------- 7f799a3 Prometheus-exporter to use DevStack's neutron"-legacy" module f8fc386 Set min version of tox to 3.2.1 3c51b2e drop mock from lower-constraints be06c76 Revert "Remove six" f7d8882 Remove six ba18ac6 Switch to newer openstackdocstheme version 3258a6d Add releasenotes link to README 0826f88 Add coverage configuration for tox 45fefb8 Stop calling LOG.info on every function calls b5dd6e0 Add py38 package metadata 95f2533 Add Python3 victoria unit tests 2b5ef36 Update master for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .coveragerc | 11 +++++++++++ .zuul.yaml | 21 ++++++++------------- README.rst | 1 + ironic_prometheus_exporter/parsers/ipmi.py | 7 ------- lower-constraints.txt | 4 ++-- releasenotes/source/conf.py | 8 +++----- releasenotes/source/index.rst | 1 + releasenotes/source/ussuri.rst | 6 ++++++ setup.cfg | 1 + test-requirements.txt | 1 + tox.ini | 14 +++++++++++++- 13 files changed, 56 insertions(+), 32 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index e95e8fe..75c412a 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6,0 +7 @@ oslotest>=3.2.0 # Apache-2.0 +coverage!=4.4,>=4.0 # Apache-2.0

1 0

ironic-ui 4.1.0 (victoria)
by no-reply＠openstack.org 13 Aug '20

13 Aug '20

We are psyched to announce the release of: ironic-ui 4.1.0: Ironic plugin UI for Horizon to allow users to view and manage bare metal nodes, ports and drivers. This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/ironic-ui Download the package from: https://pypi.org/project/ironic-ui Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic-ui For more details, please see below. Changes in ironic-ui 4.0.0..4.1.0 --------------------------------- 50134dc api: drop project_id from kwargs in client 6d253ca Cleanup py27 support cae8625 drop mock from lower-constraints and requirements beb5081 Switch to newer openstackdocstheme and reno versions aa5d060 Imported Translations from Zanata e5972f1 Imported Translations from Zanata 3528093 Add py38 package metadata c0e231c Add Python3 victoria unit tests 4855969 Update master for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- ironic_ui/api/ironic.py | 1 - ironic_ui/api/ironic_rest_api.py | 3 +-- ironic_ui/content/ironic/panel.py | 1 + ironic_ui/test/settings.py | 16 ++++++------ lower-constraints.txt | 6 ----- releasenotes/source/conf.py | 11 +++----- releasenotes/source/index.rst | 1 + .../source/locale/de/LC_MESSAGES/releasenotes.po | 29 ++++++++++++++++++++-- .../locale/en_GB/LC_MESSAGES/releasenotes.po | 13 ++++++---- releasenotes/source/ussuri.rst | 6 +++++ setup.cfg | 17 +++---------- setup.py | 9 ------- test-requirements.txt | 2 +- tox.ini | 8 +++--- 17 files changed, 74 insertions(+), 65 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 7cb47f4..ae17714 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 +hacking>=3.1.0,<=3.2.0 # Apache-2.0

1 0

bifrost 8.3.0 (victoria)
by no-reply＠openstack.org 13 Aug '20

13 Aug '20

We are jazzed to announce the release of: bifrost 8.3.0: Deployment of physical machines using OpenStack Ironic and Ansible This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/bifrost Download the package from: https://tarballs.openstack.org/bifrost/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/bifrost For more details, please see below. 8.3.0 ^^^^^ New Features ************ * Adds support for configuring credential-less deploy via the new "agent" power interface and the "manual-management" hardware type. * Extra parameters for ansible can now be passed to "bifrost-cli" via the "-e"/"--extra-vars" flag. The format is the same as for ansible- playbook. * Metadata cleaning is now enabled by default, set "cleaning" to "false" to disable completely. * To enable full disk cleaning, set "cleaning_disk_erase" to "true". * The new parameter "default_boot_mode" allows specifying the default boot mode: "uefi" or "bios". * Set the new parameter "developer_mode" to "true" to make all packages installed from source to be installed with the "--editable" flag. The corresponding "bifrost-cli" argument is "--develop". * The new variable "git_url_root" allows overriding the root URL for all repositories (e.g. changing the default "https://opendev.org" to a local path). * HTTP basic authentication for API services is now supported in addition to no authentication and Keystone. It is triggered by setting "noauth_mode=false" with "enable_keystone=false". * Installations with "bifrost-cli" now use HTTP basic authentication if Keystone is disabled. * The ramdisk logs for inspection are now stored by default in "/var/log/ironic-inspector/ramdisk". * If "keystone_lockout_security_attempts" is enabled, the amount of time the account stays locked is now regulated by the new parameter "keystone_lockout_duration" (defaulting to 1800 seconds). * Deploy/cleaning ramdisk logs are now always stored by default, use "ironic_store_ramdisk_logs" to override. * Added creation of a symbolic link from $VENV/collections directory which contains ansible collections to the playbooks subdirectory of bifrost. This is done in the env-setup.sh script. * The "bifrost-create-vm-nodes" role now supports redfish emulation, set "test_vm_node_driver=redfish" (or "--driver=redfish" for "bifrost-cli testenv") to use. * The new parameter "default_boot_mode" allows specifying the default boot mode: "uefi" or "bios". Upgrade Notes ************* * The variable "ci_testing" is no longer taken into account by the roles. Use the existing "copy_from_local_path" if you need Bifrost to copy repositories from their pre-cached locations. * If you use "cleaning=true" to enable full disk cleaning, you need to also set "cleaning_disk_erase=true" now. Omitting it will result in only metadata cleaning enabled. * All services now use *journald* logging by default, "ironic- api.log" and "ironic-conductor.log" are no longer populated. Use "ironic_log_dir" and "inspector_log_dir" to override. * The ramdisk logs for deploy/cleaning are now by default stored in "/var/log/ironic/deploy". * The "inspector_user" user is not created by default any more. Use "bifrost_user" instead. * If you're relying on default passwords (e.g. for the database or keystone passwords), they will be changed on upgrade. Please use explicit values if you want to avoid it. * OpenStackSDK is now installed from PyPI by default, set "openstacksdk_source_install=true" to override. * Previously installation used to be skipped completely if the "skip_install" variable is defined, independent of its value. This has been fixed, and now installation is only skipped if "skip_install" is defined and equals "true". Deprecation Notes ***************** * Deprecates providing inspector discovery parameters via "inspector[discovery]", use explicit variables instead. * Bifrost will switch to HTTP basic authentication by default in the future. If you want to avoid it, please set "noauth_mode" to "false" explicitly. * The "ironic_db_password" parameter is deprecated, please use "service_password" to set a password to use between services or override the whole "ironic" and "keystone" objects. Security Issues *************** * Uses mode 0700 for the inspector log directories to prevent them from being world readable. * When using Keystone, no longer locks users out of their accounts on 3 unsuccessful attempts to log in. This creates a very trivially exploitable denial-of-service issue. Use "keystone_lockout_security_attempts" to re-enable (not recommended). * Uses mode 0700 for the ironic log directories to prevent them from being world readable. * Random passwords are now generated by default instead of using a constant. The same parameters as before can be used to override them. Bug Fixes ********* * No longer clones repositories with corresponding "*_source_install" variables set to "false". * Ironic Staging Drivers are now installed from source by default since they are released very infrequently (usually once per cycle). * The addition of the symbolic link makes bifrost playbooks independent of the ANSIBLE_COLLECTIONS_PATHS environment variable which wasn't reliably set in some environments. * Removing dependency on libselinux-python for Fedora OS family. This package is no longer present in Fedora 32 and was causing installation failures. It is safe to remove as it is used with python2 only. * On systems with SELinux enforcing, enables nginx to read symbolic links. Fixes network boot of instances. Other Notes *********** * The role "bifrost-openstack-ci-prep" has been removed. It was only used in the upstream CI context and is no longer required. * The variable "ci_testing_zuul" is no longer used or set. * The version of cirros used by default is now 0.5.1 (instead of 0.4.0). * Bifrost now uses the equivalent modules from the openstack.cloud collection. The change on modules is listed below. * *os_client_config* is *config* * *os_ironic* is *baremetal_node* * *os_ironic_inspect* is *baremetal_inspect* * *os_ironic_node* is *baremetal_node_action* * *os_keystone_role* is *identity_role* * *os_keystone_service* is *catalog_service* * *os_user* is *identity_user* * *os_user_role* is *role_assignment* Changes in bifrost 8.2.0..8.3.0 ------------------------------- bcda97b Support HTTP basic auth and switch bifrost-cli to it 02fb11f Support redfish emulation and run the keystone jobs with redfish 9f62bc9 Support default_boot_mode and prepare the CI for different boot modes a52b831 Change to "collections" where needed 73d71b2 Clean up bindep.txt d6f0551 Dynamic roles: consolidate auth parameters in one place 1dc4564 Add developer mode to bifrost da35932 Clean up requirements 0d3cf24 Install openstacksdk from pypi by default 77d09f0 Remove upstart templates 33a63bc Make ironic logging more in line with other services. e816543 Add non-voting jobs with the openstack ansible collection from source 42f6d94 Consolidate env-setup 29cbe1b Support installing the openstack collection from a local location fbb66d1 Add ansible collections symlink to .gitignore 2a6fc72 Use random passwords by default 90ec389 Switch bifrost to openstack.cloud collections 1606aad Store inspector ramdisk logs by default 112932d Enable debug logging in virtualbmc 92ec342 Correct handling of inspect_nodes in test-bifrost.yaml ac2c136 bifrost_inventory: use stderr for logging c331093 Create symlink to ansible collections on install 3c5377c Auto-set ansible_python_interpreter when in venv 3657bf7 Support configuring credential-less deploy 716f0fe Disable keystone account locking by default 639d9a5 Make ansible ask for sudo password b67115d Support extra-vars in bifrost-cli e3f5984 Expand advanced install instructions e03d187 Update to cirros 0.5.1 d5b49bd Enable metadata cleaning by default fc2b247 Make skip_install a normal boolean variable 8210ff3 selinux: allow nginx to read symbolic links 6610cf4 Rework installation documentation for an easier start df9c0d4 Set min version of tox to 3.2.1 f4f456d Removing libselinux-python package from Fedora dependencies a47db1e Account for bugfix branches in bifrost-cli 9e9249c Add git_url_root to override root for all repositories at once ab69cca Get rid of ci_testing variable in roles 9b1d1d5 Do not clone repos with source_install==false 12bbea5 Remove bifrost-openstack-ci-prep role Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 + ...nts.yml => ansible-collections-requirements.yml | 0 bifrost/cli.py | 50 +++- bifrost/inventory.py | 1 + bindep.txt | 13 +- lower-constraints.txt | 7 +- playbooks/ci/run.yaml | 3 + playbooks/install.yaml | 3 +- playbooks/inventory/group_vars/localhost | 4 +- playbooks/inventory/group_vars/target | 4 +- playbooks/redeploy-dynamic.yaml | 1 - playbooks/roles/bifrost-cloud-config/README.md | 89 +++++++ .../roles/bifrost-cloud-config/defaults/main.yml | 2 + .../roles/bifrost-cloud-config/tasks/main.yml | 62 +++++ .../bifrost-configdrives-dynamic/defaults/main.yml | 8 +- .../tasks/update_facts_from_ironic.yaml | 26 +- .../defaults/main.yml | 5 + .../bifrost-create-dib-image/defaults/main.yml | 1 + .../bifrost-create-vm-nodes/defaults/main.yml | 10 +- .../defaults/required_defaults_CentOS.yml | 1 + .../defaults/required_defaults_Debian.yml | 3 + .../defaults/required_defaults_Fedora.yml | 3 +- .../defaults/required_defaults_RedHat.yml | 1 + .../defaults/required_defaults_Suse.yml | 3 + .../defaults/required_defaults_Ubuntu_20.04.yml | 3 + .../bifrost-create-vm-nodes/tasks/create_vm.yml | 12 +- .../roles/bifrost-create-vm-nodes/tasks/main.yml | 11 +- .../tasks/prepare_libvirt.yml | 68 +++++- .../templates/redfish-emulator.conf.j2 | 11 + .../templates/redfish-emulator.service.j2 | 15 ++ .../templates/virtualbmc.conf | 2 + .../roles/bifrost-deploy-nodes-dynamic/README.md | 2 +- .../bifrost-deploy-nodes-dynamic/defaults/main.yml | 7 +- .../bifrost-deploy-nodes-dynamic/tasks/main.yml | 29 +-- playbooks/roles/bifrost-ironic-install/README.md | 29 ++- .../roles/bifrost-ironic-install/defaults/main.yml | 128 +++++----- .../defaults/required_defaults_Debian_family.yml | 1 + .../defaults/required_defaults_Fedora.yml | 2 +- .../defaults/required_defaults_RedHat_family.yml | 1 + .../defaults/required_defaults_Suse_family.yml | 1 + .../defaults/required_defaults_Ubuntu.yml | 1 + .../bifrost-ironic-install/files/ironic_policy.te | 4 +- .../bifrost-ironic-install/tasks/bootstrap.yml | 59 +++-- .../bifrost-ironic-install/tasks/hw_types.yml | 8 + .../tasks/inspector_bootstrap.yml | 43 +++- .../roles/bifrost-ironic-install/tasks/install.yml | 8 +- .../tasks/keystone_setup.yml | 15 +- .../tasks/keystone_setup_inspector.yml | 11 +- .../templates/ironic-inspector.conf.j2 | 23 +- .../templates/ironic.conf.j2 | 58 ++++- .../templates/upstart_template.j2 | 10 - .../defaults/main.yml | 18 ++ .../templates/clouds.yaml.j2 | 23 +- .../templates/openrc.j2 | 25 +- .../bifrost-keystone-install/defaults/main.yml | 25 +- .../bifrost-keystone-install/tasks/install.yml | 2 +- .../roles/bifrost-keystone-install/tasks/main.yml | 26 ++ .../templates/keystone.conf.j2 | 5 +- .../templates/upstart_template.j2 | 10 - .../roles/bifrost-openstack-ci-prep/README.md | 80 ------- .../bifrost-openstack-ci-prep/defaults/main.yml | 3 - .../roles/bifrost-openstack-ci-prep/meta/main.yml | 15 -- .../roles/bifrost-openstack-ci-prep/tasks/main.yml | 49 ---- .../roles/bifrost-pip-install/defaults/main.yml | 3 + playbooks/roles/bifrost-pip-install/tasks/main.yml | 7 +- playbooks/roles/bifrost-prep-for-install/README.md | 20 +- .../bifrost-prep-for-install/defaults/main.yml | 47 +++- .../roles/bifrost-prep-for-install/tasks/main.yml | 4 +- .../defaults/main.yml | 5 + playbooks/roles/bifrost-rabbitmq/defaults/main.yml | 5 + .../defaults/main.yml | 7 +- .../tasks/main.yml | 25 +- .../roles/ironic-delete-dynamic/defaults/main.yml | 6 +- .../roles/ironic-delete-dynamic/tasks/main.yml | 24 +- .../roles/ironic-enroll-dynamic/defaults/main.yml | 8 +- .../roles/ironic-enroll-dynamic/tasks/main.yml | 22 +- .../roles/ironic-inspect-node/defaults/main.yml | 5 + playbooks/roles/ironic-inspect-node/tasks/main.yml | 42 +--- playbooks/test-bifrost-create-vm.yaml | 7 +- playbooks/test-bifrost.yaml | 49 +--- .../notes/agent-power-0773acb338ae4169.yaml | 9 + .../notes/bifrost-cli-extra-19fd989a05b2e4b4.yaml | 6 + ...bifrost-openstack-ci-prep-172cbb159e0a2b78.yaml | 5 + .../notes/ci-testing-faa63db25ebc94df.yaml | 9 + .../notes/cirros-0.5.1-d09a433cbea1a3b9.yaml | 4 + releasenotes/notes/cleaning-9b4241342320f315.yaml | 12 + .../notes/default-boot-mode-5561325f68224719.yaml | 5 + .../notes/developer-mode-000e7a125642b9e1.yaml | 6 + .../notes/git-url-root-c81478d395f66e46.yaml | 6 + .../notes/http-basic-40df399ea63956aa.yaml | 14 ++ .../inspector-ramdisk-logs-0db7c111fd455cec.yaml | 9 + .../notes/keystone-lockout-c8a26a09e0f0560b.yaml | 12 + releasenotes/notes/logging-bcc7d552944c94e4.yaml | 17 ++ releasenotes/notes/no-clone-cebedc81211dcfa5.yaml | 8 + .../notes/random-passwords-b33b8de010ee82b6.yaml | 18 ++ .../notes/releasenote-4812959d071329fc.yaml | 11 + .../notes/releasenote-94bcb2b0da207f94.yaml | 7 + .../notes/sdk-source-1bd77dbd11b08577.yaml | 5 + .../notes/selinux-lnk_file-527ac51c60f9c2ad.yaml | 5 + .../notes/skip-install-bfd642f5065cf304.yaml | 7 + ...h_to_openstack_collection-a6eb3e24a68a1a82.yaml | 14 ++ .../notes/test-redfish-54ed748e2305d8eb.yaml | 9 + requirements.txt | 7 +- scripts/collect-test-info.sh | 27 +-- scripts/env-setup.sh | 45 ++-- scripts/test-bifrost.sh | 33 ++- test-requirements.txt | 4 - tox.ini | 2 +- zuul.d/bifrost-jobs.yaml | 14 +- zuul.d/project.yaml | 4 + 114 files changed, 1333 insertions(+), 715 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 7531fba..70f3ed9 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7 +7,4 @@ oslo.log>=3.36.0 # Apache-2.0 -paramiko>=2.0.0 # LGPLv2.1+ +PyYAML>=3.12 # MIT +passlib>=1.7.2 # BSD +# TODO(dtantsur): remove pyOpenSSL when we no longer support Bionic and +# openSUSE updates its version to at least 18.0.0. @@ -9 +12 @@ pyOpenSSL>=18.0.0 # Apache-2.0 -setuptools!=24.0.0,!=34.0.0,!=34.0.1,!=34.0.2,!=34.0.3,!=34.1.0,!=34.1.1,!=34.2.0,!=34.3.0,!=34.3.1,!=34.3.2,!=36.2.0,>=21.0.0 # PSF/ZPL +setuptools!=48.0.0,!=49.0.0,>=39.0.1 # PSF/ZPL diff --git a/test-requirements.txt b/test-requirements.txt index 08571a1..d9fdd01 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9 +8,0 @@ doc8>=0.6.0 # Apache-2.0 -oslotest>=3.2.0 # Apache-2.0 @@ -11,2 +9,0 @@ stestr>=2.0.0 # Apache-2.0 -testrepository>=0.0.18 # Apache-2.0/BSD -testscenarios>=0.4 # Apache-2.0/BSD @@ -14 +10,0 @@ testtools>=2.2.0 # MIT -PyYAML>=3.12 # MIT

1 0

ironic-inspector 10.3.0 (victoria)
by no-reply＠openstack.org 13 Aug '20

13 Aug '20

We are delighted to announce the release of: ironic-inspector 10.3.0: Hardware introspection for OpenStack Bare Metal This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through: https://storyboard.openstack.org/#!/project/944 For more details, please see below. 10.3.0 ^^^^^^ New Features ************ * The new API "GET /v1/introspection/<node>/data/unprocessed" allows retrieving raw (unprocessed) data if data store is enabled. Upgrade Notes ************* * API now listens on "::" by default, change the "listen_address" configuration option to modify. Bug Fixes ********* * The "extra_hardware" processing hook no longer refuses to parse extra data if some records are empty or have unexpected length. These records are now discared. The previous behavior can be returned by setting the new option "[extra_hardware]strict" to "True". * The "extra_hardware" processing hook no longer removes the incoming "data" object if it has unexpected data format, assuming that this object is used for something else. The previous behavior can be returned by setting the new option "[extra_hardware]strict" to "True". * Using auth_strategy=http_basic incorrectly required authentication for public paths such as / and /v1. These paths are now public. * Fixes an issue which may occur with Apache httpd webservers acting as a proxy where the server may report "Bad Gateway", however inspector continues operating as if there was no problem. This was due to a lack of a "Content-Type" header on HTTP 202 and 204 replies, and lack of message body with HTTP 202 messages which Apache httpd can error upon. * No longer tries to set "local_gb" to -1 if the matched root device has size of zero. Changes in ironic-inspector 10.2.0..10.3.0 ------------------------------------------ 523c52d Fix requirements job 9de65e3 Normalize formatting in the API versions reference 6a8d46b Listen on :: by default 3243cac Relax extra_hardware data validation by default a5e8cce CI: run doc8 on api-ref bd16d80 Remove built-in API documentation in favour of API-REF cc7fcf4 Add support for retrieving unprocessed data 92c6422 Add public api support to basic auth 6e2cb60 Respond so Apache HTTPd doesn't think the request failed 32d68ef Set min version of tox to 3.2.1 039844a Make inspector base CI job use 2 CPUs 95e103d Do not try to set local_gb to -1 when the matched root device size is 0 a1f8926 Remove non-inclusive language in pxe filter Diffstat (except docs and test files) ------------------------------------- CONTRIBUTING.rst | 3 +- api-ref/source/index.rst | 9 +- api-ref/source/introspection-api-v1-continue.inc | 4 +- ...trospection-api-v1-introspection-management.inc | 42 +++ api-ref/source/introspection-api-versions.inc | 44 ++- api-ref/source/parameters.yaml | 36 +- devstack/plugin.sh | 1 - ironic_inspector/conf/__init__.py | 2 + ironic_inspector/conf/default.py | 2 +- ironic_inspector/conf/extra_hardware.py | 33 ++ ironic_inspector/conf/opts.py | 3 +- ironic_inspector/introspect.py | 6 +- ironic_inspector/main.py | 55 ++- ironic_inspector/node_cache.py | 2 + ironic_inspector/plugins/extra_hardware.py | 70 ++-- ironic_inspector/plugins/standard.py | 16 +- ironic_inspector/pxe_filter/dnsmasq.py | 110 +++--- ironic_inspector/pxe_filter/iptables.py | 28 +- ironic_inspector/test/functional.py | 15 +- .../test/unit/test_dnsmasq_pxe_filter.py | 84 ++--- ironic_inspector/test/unit/test_iptables.py | 54 +-- ironic_inspector/test/unit/test_main.py | 42 ++- .../test/unit/test_plugins_extra_hardware.py | 70 +++- .../test/unit/test_plugins_standard.py | 10 + ironic_inspector/utils.py | 44 ++- lower-constraints.txt | 2 +- .../notes/extra-check-9cf0a7d89e534ccd.yaml | 16 + .../http-basic-public-api-2cf0e206bea4b34e.yaml | 5 + releasenotes/notes/listen-v6-effec95455e900f8.yaml | 5 + .../reply-with-content-type-644b741261c87c8c.yaml | 9 + .../notes/unprocessed-07842e56eb60e253.yaml | 5 + releasenotes/notes/zero-size-55c4b4f2b9e8384d.yaml | 5 + requirements.txt | 4 +- tox.ini | 4 +- zuul.d/ironic-inspector-jobs.yaml | 1 + 40 files changed, 628 insertions(+), 648 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 27b08bb..a31f8d9 100644 --- a/requirements.txt +++ b/requirements.txt @@ -8 +8 @@ eventlet!=0.18.3,!=0.20.1,>=0.18.2 # MIT -Flask>=1.0 # BSD +Flask>=1.1.0 # BSD @@ -11 +11 @@ ironic-lib>=4.3.0 # Apache-2.0 -jsonpath-rw<2.0,>=1.2.0 # Apache-2.0 +jsonpath-rw>=1.2.0 # Apache-2.0

1 0

glance_store 2.2.0 (victoria)
by no-reply＠openstack.org 13 Aug '20

13 Aug '20

We are happy to announce the release of: glance_store 2.2.0: OpenStack Image Service Store Library This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/glance_store Download the package from: https://pypi.org/project/glance_store For more details, please see below. 2.2.0 ^^^^^ Bug Fixes * Bug #1884482 (https://bugs.launchpad.net/cinder/+bug/1884482) Blocked creation of images on encrypted nfs volumes when glance store is cinder. Changes in glance_store 2.1.0..2.2.0 ------------------------------------ 3b71ce2 Copy data files to glance upon installation e9c3d14 [Trivial]Add missing white space between words 100fe26 [goal] Migrate glance_store jobs to focal 1f50f31 zuul: glance_store-src-ceph-tempest replaces a legacy job 30bd030 use stevedore to load extensions d519bb5 requirements: Drop os-testr 31bd6ad Fix mock import in unit tests becd574 Don't allow image creation with encrypted nfs volumes 3d47607 Stop to use the __future__ module. ab4c9fd Cap jsonschema 3.2.0 as the minimal version Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 23 ++++++++++-- glance_store/_drivers/cinder.py | 15 ++++++++ glance_store/_drivers/rbd.py | 2 -- glance_store/common/fs_mount.py | 2 +- lower-constraints.txt | 3 +- ...ing-encrypted-nfs-volumes-d0ff370ab762042e.yaml | 6 ++++ requirements.txt | 2 +- setup.cfg | 5 +++ test-requirements.txt | 1 - tools/install_venv.py | 2 -- tools/install_venv_common.py | 2 -- 14 files changed, 96 insertions(+), 42 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index e217936..e537c3a 100644 --- a/requirements.txt +++ b/requirements.txt @@ -13 +13 @@ six>=1.10.0 # MIT -jsonschema>=2.6.0 # MIT +jsonschema>=3.2.0 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index e8fe8d0..988fbc3 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -21 +20,0 @@ oslotest>=3.2.0 # Apache-2.0 -os-testr>=1.0.0 # Apache-2.0

1 0

glance 19.0.4 (train)
by no-reply＠openstack.org 12 Aug '20

12 Aug '20

We are stoked to announce the release of: glance 19.0.4: OpenStack Image Service This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/glance Download the package from: https://tarballs.openstack.org/glance/ Please report issues through: https://bugs.launchpad.net/glance/+bugs For more details, please see below. 19.0.4 ^^^^^^ Bug Fixes * Bug 1855708: Reload broken in PY3 (https://bugs.launchpad.net/glance/+bug/1855708) * Bug 1887994: Mixed message in admin docs to deploy under httpd (https://bugs.launchpad.net/glance/+bug/1887994) * Bug 1888349: glance-cache-manage utility is broken * Bug 1886374: Improve lazy loading mechanism for multiple stores (https://code.launchpad.net/bugs/1888349) (https://code.launchpad.net/bugs/1886374) Changes in glance 19.0.3..19.0.4 -------------------------------- 5bbd3567 Fix formatting error in release note 19ab997f Releasenotes for Train point release 27732251 Fix broken glance-cache-manage utility 7f690381 Return the mod_proxy_uwsgi paragraph f3cbe90b Fix reloading under PY3 b264d5bf Fix admin docs deploying under HTTPD baf6b5eb Improve lazy loading mechanism for multiple stores bdba1fea Use grenade-multinode instead of the custom legacy job 8abe20d5 zuul: switch to the "plain" grenade job here too Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 17 +-- glance/api/authorization.py | 12 +- glance/api/v2/images.py | 12 +- glance/common/store_utils.py | 35 +++-- glance/common/utils.py | 11 +- glance/common/wsgi.py | 4 +- .../legacy/glance-dsvm-grenade-multinode/post.yaml | 15 --- .../legacy/glance-dsvm-grenade-multinode/run.yaml | 45 ------- .../notes/Fix_reload_PY3-e8a5bd337a77be1a.yaml | 6 + .../notes/fix_httpd_docs-3efff0395f96a94d.yaml | 6 + .../train-point-release-5215aac30150a9cb.yaml | 11 ++ 20 files changed, 301 insertions(+), 256 deletions(-)

1 0

glance 20.0.1 (ussuri)
by no-reply＠openstack.org 12 Aug '20

12 Aug '20

We are delighted to announce the release of: glance 20.0.1: OpenStack Image Service This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/glance Download the package from: https://tarballs.openstack.org/glance/ Please report issues through: https://bugs.launchpad.net/glance/+bugs For more details, please see below. 20.0.1 ^^^^^^ Bug Fixes * Bug 1881958: read-only http store should not be used if --all- stores specified for import/copy image workflow (https://bugs.launchpad.net/glance/+bug/1881958) * Bug 1889640: Image import might result 'active' image with no data. (https://bugs.launchpad.net/glance/+bug/1889640) * Bug 1889676: "stores" can be set as property breaking multistore indication of stores where the images are present (https://bugs.launchpad.net/glance/+bug/1889676) * Bug 1887994: Mixed message in admin docs to deploy under httpd (https://bugs.launchpad.net/glance/+bug/1887994) * Bug 1885725: 'copy-image' import job should not run additional plugins (https://code.launchpad.net/bugs/1885725) * Bug 1888349: glance-cache-manage utility is broken * Bug 1886374: Improve lazy loading mechanism for multiple stores * Bug 1885003: Interrupted copy-image may break a subsequent operation * Bug 1884587: image import copy-image API should reflect proper authorization (https://code.launchpad.net/bugs/1888349) (https://code.launchpad.net/bugs/1886374) (https://code.launchpad.net/bugs/1885003) (https://code.launchpad.net/bugs/1884587) Changes in glance 20.0.0..20.0.1 -------------------------------- d63d7279 Fix active image when all uploads fail 2b3ce07c Fix active image without data 69848bfc Add "stores" to disallowed properties 9cee9a68 Releasenotes for Ussuri point release 8626777d Fix formatting error in release note 1bb6a32b Fix broken glance-cache-manage utility 3a8fc940 Fix admin docs deploying under HTTPD 9a104acb Improve lazy loading mechanism for multiple stores 2df2792f Don't include plugins on 'copy-image' import 72510f9c Fix: Interrupted copy-image leaking data on subsequent operation fcba0398 Check authorization before import for image 0855cc1e Use grenade-multinode instead of the custom legacy job c3fd60f7 Exclude http store if --all-stores specified for import/copy operation f78463ed Switch to new grenade job name Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 17 +-- glance/api/authorization.py | 12 +- glance/api/v2/images.py | 18 ++- .../async_/flows/_internal_plugins/copy_image.py | 21 ++- glance/async_/flows/api_image_import.py | 61 ++++++--- glance/common/store_utils.py | 35 +++-- glance/common/utils.py | 4 + glance/common/wsgi.py | 4 +- .../unit/async_/flows/test_api_image_import.py | 94 +++++++++++++ .../legacy/glance-dsvm-grenade-multinode/post.yaml | 15 --- .../legacy/glance-dsvm-grenade-multinode/run.yaml | 46 ------- .../notes/bug-1881958-d0e16538f3c0ffaa.yaml | 6 + .../notes/fix_1889640-95d543629d7dadce.yaml | 6 + .../notes/fix_1889676-f8d302fd240c8a57.yaml | 6 + .../notes/fix_httpd_docs-3efff0395f96a94d.yaml | 6 + ...no_plugins_for_copy-image-26c0e384a368bf6a.yaml | 6 + .../ussuri-point-release-35cdd66344a3f62c.yaml | 16 +++ 27 files changed, 662 insertions(+), 252 deletions(-)

1 0

python-glanceclient 3.2.1 (victoria)
by no-reply＠openstack.org 12 Aug '20

12 Aug '20

We are satisfied to announce the release of: python-glanceclient 3.2.1: OpenStack Image API Client Library This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/python-glanceclient Download the package from: https://pypi.org/project/python-glanceclient Please report issues through: https://bugs.launchpad.net/python-glanceclient/+bugs For more details, please see below. 3.2.1 ^^^^^ Bug Fixes * Bug 1889666: 'stores' property added when using image-create-via- import --stores <list> (https://bugs.launchpad.net/glance/+bug/1889666) * * Bug 1886650: Glance client does not correctly forward global request IDs (https://code.launchpad.net/bugs/1886650) Changes in python-glanceclient 3.2.0..3.2.1 ------------------------------------------- 77eab17 Fixes "stores" property added to the image bae1d89 Pass Global Request ID on with session client b513c8d Do not use the six library. 928935e Do not use the six library in the tests. e8455f5 Stop to use the __future__ module. Diffstat (except docs and test files) ------------------------------------- glanceclient/common/http.py | 25 +++------ glanceclient/common/https.py | 21 ++----- glanceclient/common/progressbar.py | 4 +- glanceclient/common/utils.py | 23 +++----- glanceclient/exc.py | 5 +- glanceclient/shell.py | 40 +------------ glanceclient/v1/apiclient/base.py | 12 ++-- glanceclient/v1/apiclient/exceptions.py | 4 +- glanceclient/v1/apiclient/utils.py | 6 +- glanceclient/v1/images.py | 13 ++--- glanceclient/v1/shell.py | 2 - glanceclient/v2/images.py | 15 +++-- glanceclient/v2/metadefs.py | 9 ++- glanceclient/v2/shell.py | 3 + glanceclient/v2/tasks.py | 7 ++- lower-constraints.txt | 1 - .../notes/fix_1889666-22dc97ce577eccc6.yaml | 6 ++ .../notes/sess_client_grid-3c2101609110f413.yaml | 6 ++ requirements.txt | 1 - tox.ini | 2 +- 29 files changed, 208 insertions(+), 255 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 25b670a..ca8abaf 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9 +8,0 @@ warlock<2,>=1.2.0 # Apache-2.0 -six>=1.10.0 # MIT

1 0

ironic-python-agent-builder 2.1.0
by no-reply＠openstack.org 11 Aug '20

11 Aug '20

We are psyched to announce the release of: ironic-python-agent-builder 2.1.0: Tools and scripts to build Ironic Python Agent The source is available from: https://opendev.org/openstack/ironic-python-agent-builder Download the package from: https://tarballs.openstack.org/ironic-python-agent-builder/ For more details, please see below. 2.1.0 ^^^^^ New Features ************ * Supports building images for Ussuri+ on CentOS 7 using Python 3. This is not recommended but is necessary for some older hardware. Bug Fixes ********* * Installs "linux-firmware" on the DIB images since it's now uninstalled by the base elements on Red Hat operating systems. Changes in ironic-python-agent-builder 2.0.0..2.1.0 --------------------------------------------------- a28b8fa Support installing with Python 3 on CentOS 7 040e5f2 Log IPv6 configuration status for tinycore 4a41550 Add dynamic-login to our published images by default a1c3a16 Strip some excess from the centos dib image a41ec9d Add Tripleo IPA build image job in zuul layout 541e858 Fixes DIB_IPA_CERT certificate copy issue 654e9c7 Set min version of tox to 3.2.1 82a1ba0 Build tinyipa on focal 2a19fa3 Disable EPEL on CentOS 8 by default ddd631a [tinyipa] Fix getting MTU via dhcp e9d0443 Run ensure-pip in the build/check jobs 02d9abd Disable automatic updates in dnf-based systems 074ff4b Fix python-dev package mapping 1ae521b Install missing ffi development library 16a734a Switch to newer openstackdocstheme and reno versions 9434851 Add releasenotes link to README 79cd8ed Install linux-firmware in DIB images 53d67f3 Update tox.ini bd780bf Change ownership of tce info dir Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 15 +++++++ README.rst | 1 + .../cleanup.d/99-ramdisk-create | 1 + .../environment.d/20-disable-epel.bash | 4 ++ .../60-ironic-python-agent-ramdisk-install | 25 ++++++++++-- .../package-installs.yaml | 6 +++ dib/ironic-python-agent-ramdisk/pkg-map | 5 ++- .../post-install.d/80-ironic-python-agent-ramdisk | 12 ++++++ .../post-install.d/99-remove-extra-packages | 1 + playbooks/ironic-python-agent-build-image/pre.yaml | 3 ++ .../notes/centos7-python3-185f1d35c37096c7.yaml | 5 +++ .../notes/linux-firmware-9a6f8a9a32c5719d.yaml | 5 +++ releasenotes/source/conf.py | 8 ++-- roles/ipa-build-dib-image/defaults/main.yaml | 1 + roles/ipa-build-dib-image/tasks/main.yaml | 3 ++ test-requirements.txt | 6 +-- tinyipa/build-instance-images.sh | 7 ++++ tinyipa/build-tinyipa.sh | 7 ++++ tinyipa/build_files/bootlocal.sh | 47 +++++++++++++--------- tinyipa/finalise-tinyipa.sh | 7 ++++ tinyipa/install-deps.sh | 8 ++-- tinyipa/patches/tce-load_squashfs.patch | 20 +++++++++ tinyipa/udhcpc.script | 1 + tox.ini | 3 +- 26 files changed, 173 insertions(+), 38 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index aa70f77..3e816e9 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -10,2 +10,2 @@ doc8>=0.6.0 # Apache-2.0 -sphinx!=1.6.6,!=1.6.7,!=2.1.0,>=1.6.2 # BSD -openstackdocstheme>=1.31.2 # Apache-2.0 +sphinx>=2.0.0,!=2.1.0 # BSD +openstackdocstheme>=2.2.1 # Apache-2.0 @@ -13 +13 @@ openstackdocstheme>=1.31.2 # Apache-2.0 -reno>=2.5.0 # Apache-2.0 +reno>=3.1.0 # Apache-2.0

1 0

ironic-python-agent 6.1.1 (ussuri)
by no-reply＠openstack.org 10 Aug '20

10 Aug '20

We are chuffed to announce the release of: ironic-python-agent 6.1.1: Ironic Python Agent Ramdisk This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/ironic-python-agent Download the package from: https://tarballs.openstack.org/ironic-python-agent/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic- python-agent For more details, please see below. 6.1.1 ^^^^^ Bug Fixes * Fixes deployment failures when the image download is interrupted mid-stream while the contents are being downloaded. Previously retries were limited to only opening the initial connection. * Fixes the return value of the "apply_configuration" deploy step: the "agent" RAID interface expects the final RAID configuration to be returned. * Fixes the short timeout retries interval, which was previously "5" seconds, to a length that will allow the agent to retry after a network interruption. The time between retries is now "10" seconds, and the number of retries are set to "9" to help ensure intermittent network outages do not cause recoverable failures. * Fixes an issue with high cpu usage caused by ironic-python-agent greenthread eventlent implementation. Using eventlet.sleep(0.1) instead of eventlet.sleep(0) gives other processes of IPA more cpu time to run. * Speeds up going from inspection to cleaning with fast-track enabled by caching hardware information between the steps. * Fixes serializing exceptions originating from ironic-lib. Previously an attempt to do so would result in a "TypeError", for example: *Object of type 'InstanceDeployFailure' is not JSON serializable*. * Fixes an issue with the ironic-python-agent where we would call to setup the bootloader, which is necessary with software raid, but also attempt to clean up iSCSI. This can cause issues when using the "direct" "deploy_interface". Now the agent will only clean up iSCSI connections if iSCSI was explicitly started. For more information, please see story 2007937 (https://storyboard.openstack.org/#!/story/2007937) * The size of the ESP partition created for software RAID has been increased from 128 MiB to 550 MiB. This change is in line with the recent diskimage-builder change (https://opendev.org/openstack /diskimage-builder/commit/7fd52ba84180b4e749ccf4c9db8c49eafff46ea8) as well as the guidance from the author of gdisk (https://www.rodsbooks.com/efi-bootloaders/principles.html) * Fixes failure to detect a hung file download connection in the event that the kernel has not rapidly detected that the remote server has hung up the socket. This can happen when there is intermittent and transient connectivity issues such as those that can occur due to LACP failure response hold-downs timers in switching fabrics. * Devices with size 0 are now ignored when collecting inventory. Some hardware represents virtual floppy devices this way, see e.g. https://www.dell.com/community/Systems-Management-General/How-to- disable-iDRAC-Virtual-CD/td-p/4734424 Changes in ironic-python-agent 6.1.0..6.1.1 ------------------------------------------- 74f9b3a set EVENTLET_NO_GREENDNS to 'yes' 0f2836a Return the final RAID configuration from apply_configuration 458dc2c Ignore devices with size 0 when collecting inventory 4746f09 Prevent un-needed iscsi cleanup fd02912 Update jobs 8ab527e Limit Inspection->Lookup->Heartbeat lag 74e9ed1 Fix serializing ironic-lib exceptions e69f140 Increase the ESP partition size to 550 MiB when using software RAID aa500ec Fixes minor issues in the read() retries patch 802da0c Fix confusing logging when running asynchronous commands af0bf46 Extend retries to 9, 10 seconds apart. 1b15271 Add full download retries 33c96d0 Add timeout operations to try and prevent hang on read() ed3f00f Make the install_bootloader command asynchronous 0489144 Fix an issue with high cpu usage caused by ironic-python-agent 954ae39 CI: raise DIB jobs memory to 3 GiB 98a2b71 Update TOX_CONSTRAINTS_FILE for stable/ussuri b40cf0d Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ironic_python_agent/__init__.py | 19 ++++ ironic_python_agent/agent.py | 14 ++- ironic_python_agent/config.py | 4 +- ironic_python_agent/encoding.py | 12 +++ ironic_python_agent/extensions/base.py | 19 ++-- ironic_python_agent/extensions/image.py | 8 +- ironic_python_agent/extensions/iscsi.py | 3 +- ironic_python_agent/extensions/standby.py | 100 ++++++++++++++++---- ironic_python_agent/hardware.py | 35 ++++++- ironic_python_agent/inspector.py | 2 +- ironic_python_agent/raid_utils.py | 14 ++- ironic_python_agent/utils.py | 7 +- ...y-retries-image-downloads-67409a493c6d08ae.yaml | 6 ++ .../notes/apply-raid-aeca7848c6320d6b.yaml | 6 ++ .../extend-retry-timeout-30c930a33d97c193.yaml | 8 ++ ...x-high-cpu-usage-eventlet-1dccf3b81dd42c47.yaml | 8 ++ .../notes/inspect-to-clean-b3616d843775c187.yaml | 5 + releasenotes/notes/lib-exc-41ee122eb4a04bc4.yaml | 6 ++ ...nt-needless-iscsi-cleanup-f8d602c0abc7e8ba.yaml | 9 ++ .../notes/raid-esp-size-2c322adb2d3b9ce7.yaml | 9 ++ .../timeout_on_file_download-ed77918318316075.yaml | 9 ++ releasenotes/notes/zero-size-78d3be2ac8fd59c2.yaml | 6 ++ tox.ini | 2 +- zuul.d/ironic-python-agent-jobs.yaml | 12 ++- zuul.d/project.yaml | 14 ++- 34 files changed, 546 insertions(+), 95 deletions(-)

1 0

sushy-tools 0.12.0
by no-reply＠openstack.org 10 Aug '20

10 Aug '20

We high-spiritedly announce the release of: sushy-tools 0.12.0: A set of tools to support the development and test of the Sushy library (https://docs.openstack.org/sushy/) The source is available from: https://opendev.org/openstack/sushy-tools Download the package from: https://tarballs.openstack.org/sushy-tools/ For more details, please see below. Changes in sushy-tools 0.11.1..0.12.0 ------------------------------------- c5b9905 Flatten the emulator resources 05127d1 Get rid of Resources cache, store resources on the Application b3bbb5b Replace the static Manager driver with a new fake one fab49eb Log API errors for easier debugging 950fea8 Use property plus abstractmethod for abstractproperty ade6f5a Update version of hacking Diffstat (except docs and test files) ------------------------------------- lower-constraints.txt | 2 +- sushy_tools/emulator/base.py | 21 +- sushy_tools/emulator/main.py | 819 ++++++++++----------- sushy_tools/emulator/resources/base.py | 21 +- .../{chassis/staticdriver.py => chassis.py} | 7 +- sushy_tools/emulator/resources/chassis/__init__.py | 0 sushy_tools/emulator/resources/chassis/base.py | 68 -- .../{drives/staticdriver.py => drives.py} | 15 +- sushy_tools/emulator/resources/drives/__init__.py | 0 .../{indicators/staticdriver.py => indicators.py} | 26 +- .../emulator/resources/indicators/__init__.py | 0 sushy_tools/emulator/resources/managers.py | 88 +++ .../emulator/resources/managers/__init__.py | 0 sushy_tools/emulator/resources/managers/base.py | 68 -- .../emulator/resources/managers/staticdriver.py | 122 --- .../{storage/staticdriver.py => storage.py} | 15 +- sushy_tools/emulator/resources/storage/__init__.py | 0 sushy_tools/emulator/resources/systems/base.py | 16 +- .../{vmedia/staticdriver.py => vmedia.py} | 30 +- sushy_tools/emulator/resources/vmedia/__init__.py | 0 .../{volumes/staticdriver.py => volumes.py} | 24 +- sushy_tools/emulator/resources/volumes/__init__.py | 0 sushy_tools/emulator/templates/manager.json | 40 - .../unit/emulator/resources/chassis/__init__.py | 0 .../unit/emulator/resources/drives/__init__.py | 0 .../unit/emulator/resources/indicators/__init__.py | 0 .../unit/emulator/resources/managers/__init__.py | 0 .../emulator/resources/managers/test_static.py | 78 -- .../unit/emulator/resources/storage/__init__.py | 0 .../{chassis/test_static.py => test_chassis.py} | 9 +- .../{drives/test_static.py => test_drives.py} | 8 +- .../test_static.py => test_indicators.py} | 29 +- .../{storage/test_static.py => test_storage.py} | 8 +- .../{vmedia/test_static.py => test_vmedia.py} | 107 +-- .../{volumes/test_static.py => test_volumes.py} | 32 +- .../unit/emulator/resources/vmedia/__init__.py | 0 .../unit/emulator/resources/volumes/__init__.py | 0 test-requirements.txt | 2 +- 43 files changed, 867 insertions(+), 1342 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 6c24f35..148bd19 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -hacking>=3.0.0,<3.1.0 # Apache-2.0 +hacking>=3.1.0,<3.2.0 # Apache-2.0

1 0

neutron-lib 2.5.0 (victoria)
by no-reply＠openstack.org 06 Aug '20

06 Aug '20

We enthusiastically announce the release of: neutron-lib 2.5.0: Neutron shared routines and utilities This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/neutron-lib Download the package from: https://pypi.org/project/neutron-lib Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 2.5.0 ^^^^^ New Features * Add an API extension "address-groups" that enables users to aggregate IP address blocks into an address group object which can be later referenced when creating other resources. * Add an API extension "security-groups-normalized-cidr" that adds new, read-only attribute "normalized_cidr" to the security group rules. * Add keyword "is_sort_key" to agents. Make the agent's attribute can be used as a sort key for sorting list result. * Add "supported_extensions" method to "MechanismDriver". This method provides an standard API to implement, per mechanism driver, a way to filter the supported extensions. By default, this method will return the same set of extensions passed. * New API definition: "port-numa-affinity-policy". The new field added to "ports" API, "numa_affinity_policy", represents the NUMA affinity policy requested by this port during the virtual machine scheduling. Values: None, "required", "preferred", "legacy". * The API extension "uplink-status-propagation" has changed the default value of "propagate_uplink_status" from False to True. Now, when this extension is enabled, the VF link state will be set, by default, to "auto", following the PF link state. This change will affect only new ports; existing ports will keep their current value. Changes in neutron-lib 2.4.0..2.5.0 ----------------------------------- 1f06863 Change "propagate_uplink_status" default value to True a3961d7 New api-def: port-numa-affinity-policy 6ae3942 Add address group exceptions b64d4e2 Add DEVICE_OWNER_ROUTED constant 750141e API definition for SG group rules address groups. 8ae0c1f Add API definition for SG rule's normalized_cidr field b4e33e5 Add "supported_extensions" method to MechanismDriver 5b03597 Neutron agent-list API added with sort_key keyword 4f17bc1 Change policy on neutron-lib migration 60eab57 Metadata addresses 3d6e16d [FWaaS] Add note about deprecation of the neutron-fwaas project Diffstat (except docs and test files) ------------------------------------- api-ref/source/v2/agents.inc | 2 + api-ref/source/v2/fwaas-v2.inc | 9 +++ api-ref/source/v2/parameters.yaml | 33 +++++++++ api-ref/source/v2/ports.inc | 21 +++++- neutron_lib/api/definitions/__init__.py | 8 +++ neutron_lib/api/definitions/address_group.py | 83 ++++++++++++++++++++++ neutron_lib/api/definitions/agent_sort_key.py | 36 ++++++++++ .../api/definitions/port_numa_affinity_policy.py | 45 ++++++++++++ neutron_lib/api/definitions/portbindings.py | 2 + .../definitions/security_groups_normalized_cidr.py | 46 ++++++++++++ .../api/definitions/uplink_status_propagation.py | 2 +- neutron_lib/constants.py | 26 ++++++- neutron_lib/exceptions/__init__.py | 14 ++++ neutron_lib/exceptions/address_group.py | 30 ++++++++ neutron_lib/plugins/ml2/api.py | 15 ++++ .../unit/api/definitions/test_address_group.py | 20 ++++++ .../unit/api/definitions/test_agent_sort_key.py | 25 +++++++ .../definitions/test_port_numa_affinity_policy.py | 22 ++++++ .../test_security_groups_normalized_cidr.py | 22 ++++++ ...d-extension-address-group-5e306d90666982aa.yaml | 6 ++ ...ty-groups-normalized-cidr-ef7521b226090d7e.yaml | 5 ++ .../notes/bug-1877254-2b997b3911e98079.yaml | 5 ++ ...iver_supported_extensions-67e1b0b763571ae9.yaml | 7 ++ ...port-numa-affinity-policy-9e6d1bafd3c6af36.yaml | 7 ++ ...k_status_defaults_to_true-07dcdc20f20db594.yaml | 9 +++ 26 files changed, 504 insertions(+), 47 deletions(-)

1 0

puppet-neutron 17.2.0 (victoria)
by no-reply＠openstack.org 04 Aug '20

04 Aug '20

We are jazzed to announce the release of: puppet-neutron 17.2.0: Puppet module for OpenStack Neutron This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/puppet-neutron Download the package from: https://tarballs.openstack.org/puppet-neutron/ Please report issues through: https://bugs.launchpad.net/puppet-neutron/+bugs For more details, please see below. 17.2.0 ^^^^^^ New Features ************ * The new "neutron::server::notifications::http_retries" parameter has been added to set number of client retries. * The new "neutron::keystone::authtoken::interface" parameter has been added, which can be used to set the interface parameter in authtoken middleware. * The new "neutron::server::notifications::ironic" class has been added to support configuration parameters to enable notifications to ironic. * The new "server::notifications::nova" class has been added to configure parameters for notifications to nova. Upgrade Notes ************* * The following deprecated parameters has been removed * "neutron::server::notifications::project_domain_id" * "neutron::server::notifications::user_domain_id" * "neutron::server::notifications::tenant_id" * "neutron::server::notifications::tenant_name" * "neutron::designate::project_domain_id" * "neutron::designate::user_domain_id" * The neutron::server::database_min_pool_size and neutron::db::database_min_pool_size parameters is removed. * The database_connection, database_max_retries, database_idle_timeout, database_retry_interval, database_max_pool_size and database_max_overflow parameters in neutron::server is removed, use the neutron::db class instead. Deprecation Notes ***************** * The neutron::server::ensure_fwaas_package is deprecated and will be removed in a future release. * The neutron::services::fwaas class is deprecated and will be removed in a future release. * The neutron_fwaas_service_config resource is deprecated and will be removed in a future release. * The following parameters in "server::notifications" class has been deprecated and will be removed in a future release. Use the corresponding parameters in "server::notifications::nova" class. * "password" * "auth_type" * "username" * "project_name" * "user_domain_name" * "project_domain_name" * "auth_url" * "region_name" * "endpoint_type" * "notify_nova_on_port_status_changes" * "notify_nova_on_port_data_changes" Changes in puppet-neutron 17.1.0..17.2.0 ---------------------------------------- 8d7f30c8 Prepare Victoria M2 286d66b9 Add support for notifications to ironic 26ef871f Change to relative include 4638137d Create an independent class for nova notifications e3b416de Cleanup deprecated domain_id parameters 1389140f Add support for http_retries f065e99a Use relative name for class inclusion 9fc323f4 Nuage: remove check on mechanism driver 6d825ca6 Add support for the interface parameter in authtoken middleware 8993e812 Remove deprecated neutron database params 80f2b44b Deprecated neutron fwaas Diffstat (except docs and test files) ------------------------------------- examples/cisco_ml2.pp | 6 +- .../neutron_fwaas_service_config/ini_setting.rb | 1 + lib/puppet/type/neutron_fwaas_service_config.rb | 1 + manifests/agents/ml2/ovs.pp | 4 +- manifests/agents/n1kv_vem.pp | 2 +- manifests/client.pp | 2 +- manifests/db.pp | 39 ++----- manifests/designate.pp | 29 ----- manifests/keystone/authtoken.pp | 7 ++ manifests/plugins/ml2/arista.pp | 2 +- manifests/plugins/ml2/arista/l3.pp | 2 +- manifests/plugins/ml2/bagpipe.pp | 2 +- manifests/plugins/ml2/bigswitch.pp | 2 +- manifests/plugins/ml2/bigswitch/restproxy.pp | 2 +- manifests/plugins/ml2/cisco.pp | 2 +- manifests/plugins/ml2/cisco/vts.pp | 2 +- manifests/plugins/ml2/fujitsu/cfab.pp | 2 +- manifests/plugins/ml2/fujitsu/fossw.pp | 2 +- manifests/plugins/ml2/mellanox.pp | 2 +- manifests/plugins/ml2/mellanox/mlnx_sdn_assist.pp | 2 +- manifests/plugins/ml2/networking_ansible.pp | 2 +- manifests/plugins/ml2/networking_ansible_host.pp | 2 +- manifests/plugins/ml2/nuage.pp | 4 - manifests/plugins/ml2/opendaylight.pp | 2 +- manifests/plugins/ml2/ovn.pp | 2 +- manifests/plugins/ml2/vpp.pp | 2 +- manifests/plugins/ovs/opendaylight.pp | 2 +- manifests/server.pp | 48 ++------ manifests/server/notifications.pp | 124 ++++++-------------- manifests/server/notifications/ironic.pp | 90 +++++++++++++++ manifests/server/notifications/nova.pp | 125 +++++++++++++++++++++ manifests/services/fwaas.pp | 4 + metadata.json | 10 +- ...deperecated-id-parameters-8ae1adebf972b291.yaml | 11 ++ .../client-http_retries-2bef45e4c83037cf.yaml | 5 + .../notes/deprecate-fwaas-6dc31e22fdd10c8d.yaml | 11 ++ ...stone-authtoken-interface-e1fe904a198d11bb.yaml | 6 + ...emove-deprecated-database-095127d35fa70e40.yaml | 9 ++ ...rver-notifications-ironic-01a481317cf11c08.yaml | 5 + ...server-notifications-nova-4df35db13a4f85c8.yaml | 22 ++++ spec/classes/neutron_designate_spec.rb | 4 - spec/classes/neutron_keystone_authtoken_spec.rb | 3 + spec/classes/neutron_plugins_ml2_nuage_spec.rb | 18 --- .../neutron_server_notifications_ironic_spec.rb | 84 ++++++++++++++ .../neutron_server_notifications_nova_spec.rb | 87 ++++++++++++++ spec/classes/neutron_server_notifications_spec.rb | 60 ++-------- 46 files changed, 562 insertions(+), 293 deletions(-)

1 0

puppet-keystone 17.2.0 (victoria)
by no-reply＠openstack.org 04 Aug '20

04 Aug '20

We are overjoyed to announce the release of: puppet-keystone 17.2.0: Puppet module for OpenStack Keystone This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/puppet-keystone Download the package from: https://tarballs.openstack.org/puppet-keystone/ Please report issues through: https://bugs.launchpad.net/puppet-keystone/+bugs For more details, please see below. 17.2.0 ^^^^^^ New Features ************ * The new "keystone::cron::trust_flush" class was added to configure a cron job to purge expired or soft-deleted trusts. Upgrade Notes ************* * The following deprecated options for PKI token have been removed. * "keystone::cache_dir" * "keystone::resource::authtoken::hash_algorithms" * "keystone::resource::authtoken::check_revocations_for_cached" * The classes keystone::endpoint and keystone::roles::admin is removed, use the new keystone::bootstrap class directly. * The password parameter in keystone::bootstrap is required and does not default to undef. * The deprecated parameters admin_token, admin_password and enable_bootstrap in the keystone class is removed. Deprecation Notes ***************** * The "keystone::cron::token_flush" class has been deprcated and has no effect. * The use of keystone-public-keystone-admin for the keystone service name is deprecated, please use simply keystone instead. * The "keystone::federation::mellon::trusted_dashboards" has been removed. Bug Fixes ********* * Fixed a bug where the keystone::resource::authtoken resource would not install the proper python memcache bindings when using python3. Changes in puppet-keystone 17.1.0..17.2.0 ----------------------------------------- 57e0353 Prepare Victoria M2 8f5c683 Convert more to rspec-puppet-facts fc30737 Always pass --name when flushing keystone_service fec22db Change to relative includes d5196db Use relative name for class inclusion 4cca233 Add support for trust_flush cron job fd8badd Deprecate keystone::cron::token_fush e421e3a Remove deprecated bootstrap code 5ba56d4 Ensure fernet keys are created before bootstrap Diffstat (except docs and test files) ------------------------------------- examples/apache_with_paths.pp | 1 - lib/puppet/provider/keystone_service/openstack.rb | 3 + manifests/bootstrap.pp | 184 +++--------------- manifests/client.pp | 2 +- manifests/cron/token_flush.pp | 57 ++---- manifests/cron/trust_flush.pp | 91 +++++++++ manifests/deps.pp | 4 + manifests/endpoint.pp | 74 -------- manifests/init.pp | 28 +-- manifests/roles/admin.pp | 102 ---------- metadata.json | 6 +- .../notes/cron-trust_flush-9a85af706076f55d.yaml | 5 + ...eprecate-cron-token_flush-b76a1db6715a818b.yaml | 5 + ...move-deprecated-bootstrap-2b81ba7a7b0b4d5d.yaml | 11 ++ .../keystone_federation_identity_provider_spec.rb | 4 - .../keystone_federation_shibboleth_spec.rb | 4 - spec/acceptance/keystone_wsgi_apache_spec.rb | 4 - ...h_spec.rb => keystone_cron_trust_flush_spec.rb} | 16 +- .../keystone_federation_identity_provider_spec.rb | 175 ++++++++++-------- spec/classes/keystone_federation_openidc_spec.rb | 4 +- spec/classes/keystone_federation_spec.rb | 5 +- spec/classes/keystone_init_spec.rb | 2 + spec/classes/keystone_ldap_spec.rb | 205 +++++++++++---------- spec/classes/keystone_wsgi_apache_spec.rb | 1 - spec/spec_helper.rb | 1 - 25 files changed, 397 insertions(+), 597 deletions(-)

1 0

puppet-nova 17.2.0 (victoria)
by no-reply＠openstack.org 04 Aug '20

04 Aug '20

We are amped to announce the release of: puppet-nova 17.2.0: Puppet module for OpenStack Nova This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/puppet-nova Download the package from: https://tarballs.openstack.org/puppet-nova/ Please report issues through: https://bugs.launchpad.net/puppet-nova/+bugs For more details, please see below. 17.2.0 ^^^^^^ New Features ************ * The new "nova::glance_num_retries" parameter has been added to support "[glance] num_retries" parameter in nova. * The new "nova::keystone::authtoken::interface" parameter has been added, which can be used to set the interface parameter in authtoken middleware. Upgrade Notes ************* * The following deprecated parameters have been removed. * "nova::scheduler::filter::baremetal_scheduler_default_filters" * "nova::scheduler::filter::scheduler_use_baremetal_filters" * "nova::scheduler::filter::scheduler_host_manager" * The "nova::placement::os_interface" parameter has been removed. * The following parameters have been removed. * "nova::notify_api_faults" * "nova::notify_on_api_faults" Changes in puppet-nova 17.1.0..17.2.0 ------------------------------------- b6e5cdf7 Prepare Victoria M2 5292d3ca Remove deprecated parameters for baremetal scheduling eef0bbca Remove deprecated parameters for failure notifications e5c6e66e Add support for [glance] num_retries parameter 5df142a1 Use relative name for class inclusion 651c1a6b Add support for the interface parameter in authtoken middleware b4d9555e Remove deprecated nova::placement::os_interface Diffstat (except docs and test files) ------------------------------------- manifests/compute/ironic.pp | 2 +- manifests/compute/libvirt/qemu.pp | 2 +- manifests/compute/libvirt/virtlogd.pp | 2 +- manifests/init.pp | 26 +++++----------------- manifests/keystone/authtoken.pp | 7 ++++++ manifests/metadata/novajoin/api.pp | 2 +- manifests/placement.pp | 16 +------------ manifests/scheduler/filter.pp | 25 --------------------- metadata.json | 12 +++++----- ...baremetal-scheduling-opts-250e52ff28ae2fc3.yaml | 8 +++++++ .../notes/glance-num_retries-37361ce8905d01c8.yaml | 5 +++++ ...stone-authtoken-interface-eb3ffd7e39795f95.yaml | 5 +++++ ...ement-remove-os_interface-5b02ab5f968b94b7.yaml | 4 ++++ ...-for-failure-notification-8525eb14964260fd.yaml | 7 ++++++ spec/classes/nova_init_spec.rb | 9 ++++---- spec/classes/nova_keystone_authtoken_spec.rb | 3 +++ spec/classes/nova_scheduler_filter_spec.rb | 12 ---------- 17 files changed, 61 insertions(+), 86 deletions(-)

1 0

puppet-vswitch 13.2.0 (victoria)
by no-reply＠openstack.org 04 Aug '20

04 Aug '20

We are jazzed to announce the release of: puppet-vswitch 13.2.0: Puppet module for OpenStack Vswitch This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/puppet-vswitch Download the package from: https://tarballs.openstack.org/puppet-vswitch/ Please report issues through: https://bugs.launchpad.net/puppet-vswitch/+bugs For more details, please see below. Changes in puppet-vswitch 13.1.0..13.2.0 ---------------------------------------- 81549d4 Prepare Victoria M2 Diffstat (except docs and test files) ------------------------------------- metadata.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

puppet-zaqar 17.2.0 (victoria)
by no-reply＠openstack.org 04 Aug '20

04 Aug '20

We are amped to announce the release of: puppet-zaqar 17.2.0: Puppet module for OpenStack Zaqar This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/puppet-zaqar Download the package from: https://tarballs.openstack.org/puppet-zaqar/ Please report issues through: https://bugs.launchpad.net/puppet-zaqar/+bugs For more details, please see below. 17.2.0 ^^^^^^ New Features * The new "zaqar::keystone::authtoken::interface" parameter has been added, which can be used to set the interface parameter in authtoken middleware. Changes in puppet-zaqar 17.1.0..17.2.0 -------------------------------------- 7b37584 Prepare Victoria M2 cca0a1d Change to relative include a6eae2f Add support for the interface parameter in authtoken middleware Diffstat (except docs and test files) ------------------------------------- manifests/client.pp | 2 +- manifests/keystone/authtoken.pp | 7 +++++++ metadata.json | 8 ++++---- .../notes/keystone-authtoken-interface-cd400620b19b76c0.yaml | 5 +++++ spec/classes/zaqar_keystone_authtoken_spec.rb | 3 +++ 5 files changed, 20 insertions(+), 5 deletions(-)

1 0

puppet-panko 17.2.0 (victoria)
by no-reply＠openstack.org 04 Aug '20

04 Aug '20

We eagerly announce the release of: puppet-panko 17.2.0: Puppet module for OpenStack Panko This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/puppet-panko Download the package from: https://tarballs.openstack.org/puppet-panko/ Please report issues through: https://bugs.launchpad.net/puppet-panko/+bugs For more details, please see below. 17.2.0 ^^^^^^ New Features * The new "panko::keystone::authtoken::interface" parameter has been added, which can be used to set the interface parameter in authtoken middleware. Changes in puppet-panko 17.1.0..17.2.0 -------------------------------------- ab00542 Prepare Victoria M2 ba317b7 Add support for the interface parameter in authtoken middleware Diffstat (except docs and test files) ------------------------------------- manifests/keystone/authtoken.pp | 7 +++++++ metadata.json | 8 ++++---- .../notes/keystone-authtoken-interface-fa6f3766fc97cc86.yaml | 5 +++++ spec/classes/panko_keystone_authtoken_spec.rb | 3 +++ 4 files changed, 19 insertions(+), 4 deletions(-)

1 0

puppet-senlin 4.2.0 (victoria)
by no-reply＠openstack.org 04 Aug '20

04 Aug '20

We joyfully announce the release of: puppet-senlin 4.2.0: Puppet module for OpenStack senlin This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/puppet-senlin Download the package from: https://tarballs.openstack.org/puppet-senlin/ Please report issues through: https://bugs.launchpad.net/puppet-senlin/+bugs For more details, please see below. 4.2.0 ^^^^^ New Features * The new "senlin::keystone::authtoken::interface" parameter has been added, which can be used to set the interface parameter in authtoken middleware. Changes in puppet-senlin 4.1.0..4.2.0 ------------------------------------- 8f33e24 Prepare Victoria M2 5dca9f5 Add support for the interface parameter in authtoken middleware 426df05 Change to relative include Diffstat (except docs and test files) ------------------------------------- manifests/client.pp | 2 +- manifests/keystone/authtoken.pp | 7 +++++++ metadata.json | 8 ++++---- .../notes/keystone-authtoken-interface-a131d7b70280b297.yaml | 5 +++++ spec/classes/senlin_keystone_authtoken_spec.rb | 3 +++ 5 files changed, 20 insertions(+), 5 deletions(-)

1 0

puppet-rally 5.2.0 (victoria)
by no-reply＠openstack.org 04 Aug '20

04 Aug '20

We enthusiastically announce the release of: puppet-rally 5.2.0: Puppet module for OpenStack Rally This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/puppet-rally Download the package from: https://tarballs.openstack.org/puppet-rally/ Please report issues through: https://bugs.launchpad.net/puppet-rally/+bugs For more details, please see below. Changes in puppet-rally 5.1.0..5.2.0 ------------------------------------ 872a19e Prepare Victoria M2 Diffstat (except docs and test files) ------------------------------------- metadata.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-)

1 0